This blog provides a brief overview of November’s Legal Updates, which are relevant to Quality, Environmental, Info Sec and Health & Safety to help your organisation stay aligned with the latest legal requirements.
How to use this Update:
- You should review these updates and decide whether they are applicable to your company.
- Add all relevant items to your legal resister and document your compliance.
- Ensure all policy and procedures align with the new governance and compliance requirements.
- Provide information and training to all relevant to ensure you remain compliant
- Please note ISO 14001, ISO 45001, ISO 27001 and other standards require you to conduct a compliance evaluation.
Need assistance with these updates? We are here to help: Contact us
ISO 42001 will shape AI governance in 2026 & beyond.
Join our webinar with NQA for a practical deep dive into ISO 42001, the first global standard for AI Management Systems.
Get ahead of the changes and learn:
• Learn how ISO 42001 supports trustworthy, compliant AI and aligns with the EU AI Act.
• Hear real-world lessons from implementation and auditing.
• Discover common nonconformities, certification steps, and training requirements.
Finance
4th November
UK
The Financial Services and Markets Act 2000 (Regulated Activities etc.) (Amendment) (No. 2) Order 2025
The instrument will exempt domestic premises suppliers from credit broking regulation when they offer newly regulated interest-free Buy-Now, Pay-Later (BNPL) products to their customers. To achieve this, the instrument amends the Financial Services and Markets Act 2000 (Regulated Activities etc) (Amendment) Order 2025 (‘the 2025 Order’). Article 2(2) of this instrument amends article 36FB of the Regulated Activities Order (‘the RAO’) inserted by the 2025 Order. The effect of this amendment is that domestic premises suppliers are excluded from credit broking requirements when carrying on activities in relation to BNPL products.
Link to legislation
Business
5th November
UK
The Companies (Directors’ Report) (Payment Reporting) Regulations 2025
These Regulations amend the Large and Medium-sized Companies and Groups (Accounts and Reports) Regulations 2008 (S.I. 2008/410) (the 2008 Regulations) and introduces new reporting requirements for large companies to annually report on their payment practices and performance with respect to suppliers within their Directors’ reports.
Link to legislation
Environment
12th November
UK
The Energy Act 2023 (Commencement No. 4) Regulations 2025
Regulation 2 brings into force the remaining provisions of section 304, amending the Nuclear Installations Act 1965 (c. 57) to create a route by which certain installations for the disposal of nuclear matter can be excluded from the nuclear third party liability regime established by that Act.
Link to legislation
Finance
19th November
UK
The Financial Services and Markets Act 2000 (Regulated Activities) (Amendment) Order 2025
This instrument amends the Financial Services and Markets Act 2000 (Regulated Activities) Order 2001 (S.I. 2001/544) (RAO) to give the Financial Conduct Authority (FCA) a rule-making power to set the criteria that firms must use to determine whether they can trade in commodity derivatives and emissions allowances (including derivatives of those instruments) without having to be authorised as an investment firm by the FCA. Providing the FCA with such a rule-making power will allow the regulator to set the relevant criteria to determine whether firms need authorisation.
Link to legislation
Information Security
20th November
UK
The Online Safety Act 2023 (Fees) (Threshold Figure) Regulations 2025
The cost to Ofcom of exercising its online safety functions under the Online Safety Act 2023 (“the Act”) will be met by fees charged to providers of regulated services. Providers with qualifying worldwide revenue that is equal to or above a threshold figure must notify Ofcom and will be subject to paying a fee, unless they meet an exemption. The instrument specifies the threshold figure as £250 million.
Link to legislation
Environment
20th November
UK
The Environmental Protection (Wet Wipes Containing Plastic) Regulations (Northern Ireland) 2025
The purpose of these regulations is to ban the sale and supply of wet wipes containing plastic (with certain exemptions) to reduce the impact of plastic and microplastic pollution in the natural and marine environment. This regulation forms a four-nation approach to the ban on the sale and supply of wet wipes containing plastic. The UK Government, Scottish Government, and Welsh G
Link to legislation
Information Security
21st November
UK
The Data (Use and Access) Act 2025 (Commencement No. 4) Regulations 2025
These are the fourth commencement regulations made under the Data (Use and Access) Act 2025 (c. 18) (“the Act”).
Regulation 2 brings into force most of Part 2 of the Act (digital verification services), which establishes a legislative structure for the provision of digital verification services in the United Kingdom, where those services apply to be registered on a government register. It does not bring into force sections 45 to 48 (which deal with public authorities sharing information with registered digital verification service providers).
Link to legislation
Environment
25th November
England
The Environmental Protection (Wet Wipes Containing Plastic) (England) Regulations 2025
These regulations are being made to ban the supply and sale of wet wipes containing plastic (with certain exemptions), to reduce unnecessary plastic and microplastic pollution. The ban will come into force 18 months after the legislation is signed.
Link to legislation
Employment
27th November
Scotland
The Equality Act 2010 (Specific Duties) (Scotland) Amendment Regulations 2025
These Regulations amend the Equality Act 2010 (Specific Duties) (Scotland) Regulations 2012 (“the principal Regulations”).
Link to legislation
Employment
27th November
Scotland
The Equality Act 2010 (Specification of Public Authorities) (Scotland) Order 2025
This Order adds Zero Waste Scotland Limited to the list of Scottish public authorities in Part 3 of schedule 19 of the Equality Act 2010 (“the Act”). The public authorities listed in schedule 19 are subject to the public sector equality duty in section 149 of the Act.
Link to legislation
Employment
27th November
Northern Ireland
The Occupational Pensions (Revaluation) Order (Northern Ireland) 2025
This Order specifies the percentage by which preserved pension rights are revalued for members of salary related occupational pension schemes who leave their scheme before pension age (“early leavers”). An Order is made each year to apply to those who attain their scheme’s normal pension age in the following calendar year. This year’s Order affects people who reach the scheme’s normal pension age in 2026.
Link to legislation
Safety
28th November
Northern Ireland
The Roads (Speed Limit) (No. 4) Order (Northern Ireland) 2025
The driving of motor vehicles at a speed exceeding 40 miles per hour on the roads specified in Schedule 2 is prohibited.
Link to legislation
ISO 14001, ISO 45001, ISO 27001 and other standards require you to conduct a compliance evaluation. If you haven’t done this, we can help.
Legal Register
Assent Risk Management has made over 250 UK Legal Register entries available to search on Resilify.io’s Legal Register Database.
Need Support?
If you have questions or need guidance to navigate these updates, our team is here to help.
