Rules and ethics
Part of The five kinds of authority a retail media launch must satisfy before release
Retail media regulation in England: how to build a legal evidence register
A method for building a retail media legal evidence register in England, mapping CMA, ASA and ICO roles, broad provisions, dates from guidance and open gaps.
Retail media UK regulations are best researched as a set of authorities tied to particular activities. Start with the paid retailer or marketplace placement, then examine any connected shopper-data operation. A list of regulator names alone will not tell an England operator which requirement applies to a sponsored search result.
This source guide was researched on 6 September 2026. It covers England only; arrangements in Scotland, Wales and Northern Ireland may differ where the rules diverge. It supplies a method for building a legal evidence register.
What to take away
- Write a narrow question for each source rather than one row labelled advertising law.
- Record publisher, title, URL, provision, access date, geography, legal status and the precise claim supported.
- The DMCC Act 2024 Schedule 20 lists commercial practices prohibited in all circumstances.
- CAP section 2 is the direct code source for recognition of marketing communications.
- The DUAA commencement page records most Part 5 privacy provisions starting 5 February 2026.
Write one question per register row
Write the question narrowly: whether payment for a higher product position is disclosed, whether an advertising tag needs consent, or which party decides an audience-matching purpose. Give each question its own record. Avoid a single row labelled advertising law that mixes unrelated obligations.
For every source, capture publisher, title, direct URL, provision or paragraph, access date, geography, legal status and the precise claim supported. Add a limitation field. An enacted PDF, an amended provision and a regulator's explanation are different evidence objects even when they concern the same duty.
A worked example of the register template:
| Question | Publisher and title | Direct URL | Provision | Access date | Geography | Legal status | Claim supported | Limitation |
|---|---|---|---|---|---|---|---|---|
| Is a paid top slot obviously identified? | DMCC Act 2024, Schedule 20 | https://www.legislation.gov.uk/ukpga/2024/13/schedule/20/data.xml | Schedule 20 | 6 September 2026 | England | Enacted statute | Lists banned commercial practices | Cite the paragraph for the specific placement |
| Is the ad tag subject to consent? | ICO, guidance on storage and access technologies | https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-the-use-of-storage-and-access-technologies/how-do-the-rules-apply-to-online-advertising/ | PECR regulation 6 | 6 September 2026 | England | Regulator guidance | Explains consent for advertising storage and access | Not a check of the retailer's implementation |
| Does the label rule apply? | CAP, section 2 | https://www.asa.org.uk/type/non_broadcast/code_section/02.html | CAP rule 2.1 | 6 September 2026 | England | Advertising code | Requires marketing communications to be identifiable | A label design suggestion is not the rule itself |
| When do the food rules start? | CAP, less healthy food update | https://www.asa.org.uk/news/new-rules-and-guidance-for-less-healthy-food-and-drink-advertising.html | CAP rules on less healthy food and drink advertising | 6 September 2026 | England | Advertising code | Records the 5 January 2026 start | Product scope and exemptions need review |
| When do the privacy changes start? | DUAA commencement page | https://www.gov.uk/guidance/data-use-and-access-act-2025-plans-for-commencement | Part 5 | 6 September 2026 | England | Government guidance | Records most Part 5 provisions starting 5 February 2026 | Check the commencement instrument for the provision |
Keep a copy of the wording relied on, within the publisher's permitted reuse terms. Record the creative or technical specification reviewed alongside it. If that specification later changes, the register should show which interpretation needs reopening.
Which regulator covers what
- CMAunfair commercial practices, including the banned practices in DMCC Act 2024 Schedule 20. The CMA enforces this regime alongside Trading Standards.
- ASA and CAPthe non-broadcast advertising code. CAP section 2 covers recognition of marketing communications. The ASA can publish ad alerts and refer persistent offenders to Trading Standards.
- ICOdata protection and PECR, including consent for storage and access technologies used by advertising tags.
- Others in the setUK GDPR, PECR and the BCAP Code for broadcast advertising.
Locate consumer law and its start date
The DMCC Act 2024 Schedule 20 lists commercial practices prohibited in all circumstances. Use the specific provision relevant to paid placement; do not cite the whole Act as support for every retailer policy.
The CMA's current guidance states that this regime applies to practices from 6 April 2025. Record it as UK guidance applicable in England, alongside the revised statutory provision in official XML. Check amendments and commencement before relying on the statutory wording for a new launch.
A commercial agreement between an advertiser and a retailer is a separate research question from the consumer-facing advert. Do not apply a consumer explanation to business contract terms merely because both documents use the word commercial.
Keep advertising codes identifiable
CAP section 2 is the direct code source for recognition of marketing communications. Store the relevant rule number and describe it as an advertising-code requirement. A policy drafted from it can propose label placement, but that design recommendation is not itself the rule.
If the inventory includes grocery advertising, open the CAP less healthy food update. It records the 5 January 2026 start of the restrictions. Product scope and exemptions need further specialist assessment; the announcement does not clear an individual sponsored product.
Read privacy changes by provision
The government's DUAA commencement page records staged implementation, including most Part 5 privacy provisions on 5 February 2026. Keep the relevant commencement instrument with the provision being assessed. Avoid recording the entire Act as either pending or fully effective without that detail.
For an advertising tag, the ICO's online advertising guidance explains consent for advertising storage and access technologies. It is regulator guidance about the legal framework, not a certification of the retailer's consent implementation.
Mark voluntary standards and open gaps
Mark industry standards as voluntary unless a separate obligation or contract makes them applicable. Keep proposed house controls in an editorial column. Neither category proves that personal information can lawfully be shared with an advertising supplier.
Before handing the register to a reviewer, identify inaccessible pages, update notices and open questions. The useful output is a traceable question and evidence trail, with unresolved interpretation visible rather than hidden behind a green status.
Before you act
- Write one narrow question per record.
- Capture publisher, title, direct URL and provision.
- Record access date, geography and legal status.
- Keep a copy of the wording relied on.
- Mark industry standards as voluntary unless separately binding.
- Identify inaccessible pages and territorial assumptions.
Common questions
What should each record in the legal evidence register contain?
Capture publisher, title, direct URL, provision or paragraph, access date, geography, legal status and the precise claim supported. Add a limitation field. An enacted PDF, an amended provision and a regulator's explanation are different evidence objects even when they concern the same duty.
When do the less healthy food advertising restrictions start?
The CAP less healthy food update records the 5 January 2026 start of the restrictions. Product scope and exemptions need further specialist assessment, and the announcement does not clear an individual sponsored product.
Does the register prove a campaign complies with the law?
No. The guide supplies a method for building a legal evidence register, so the output is a traceable question and evidence trail.
