Advertising compliance: what UK businesses need to know in 2026
If your business advertises in the United Kingdom — whether online, in print, via broadcast, or through any other medium — you are subject to a regulatory framework that has tightened considerably in recent years. Non-compliance can result in enforcement action, reputational harm, and significant wasted expenditure.
Core regulatory framework
All advertising in the UK must comply with the CAP Code (non-broadcast) or the BCAP Code (broadcast), both administered by the Advertising Standards Authority (ASA). The fundamental requirements are that advertisements must be legal, decent, honest, and truthful. They must not mislead consumers, cause harm, or give offence.
Digital advertising and the Online Safety Act
Online advertising is subject to the same substantive rules as traditional media, with additional obligations around transparency and disclosure. Paid partnerships and influencer-generated content must be clearly identified as advertising. Targeted advertising must comply with data protection legislation, including the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).
The Online Safety Act 2023, now in its implementation phase, introduces further duties on platforms and services regarding the advertising of harmful or fraudulent content. Businesses advertising online should ensure their campaigns and landing pages do not fall foul of the Act’s provisions, particularly in relation to misleading claims and consumer protection.
Environmental and sustainability claims
The ASA and the Competition and Markets Authority (CMA) have increased their scrutiny of environmental claims in advertising. Claims such as “sustainable”, “carbon neutral”, or “eco-friendly” require robust, verifiable evidence. The CMA’s Green Claims Code sets out the principles that businesses should follow. Vague, unqualified, or unsubstantiated environmental claims are being challenged with increasing frequency.
Direct marketing
Direct mail, email marketing, SMS campaigns, and telemarketing are governed by both PECR and the UK GDPR. Business-to-business electronic marketing benefits from the corporate subscriber exemption and the soft opt-in provisions, but an opt-out mechanism must always be provided and the contact must be genuinely relevant to the recipient’s role.
How we help
At CM Beyer, regulatory compliance is built into every campaign we produce. Our CMB Amplify service covers creative development, media planning, and campaign management — all delivered in full compliance with current UK advertising standards and data protection requirements. If you are uncertain whether your existing advertising meets the applicable rules, we can conduct an audit and advise on any necessary changes.
To discuss your advertising requirements, contact us.