March 2026 General Legal Update
Purpose
This update summarises key legal developments issued between 1 and 31 March 2026. It highlights changes affecting Quality, Environment, Information Security and Health & Safety, supporting organisations in identifying new and emerging compliance duties.
Download the full update
Upcoming legislation
These legal texts are published but are not yet fully in force. Early review and planning is recommended.
Building Regulations etc. (Amendment) (England) Regulations 2026
Effective: 24 March 2027 (with staged commencement for higherrisk buildings from 24 September 2027)
Implements the Future Homes and Buildings Standards. Organisations involved in design, construction and building control should plan for revised energy efficiency and ventilation requirements, including transitional arrangements.
Cyber Security and Resilience (Network and Information Systems) Bill
Effective: To be confirmed
Expands the NIS regime to additional sectors, including data centres and managed service providers. Introduces strengthened cyber resilience duties, enhanced incident reporting and increased regulator powers.
Chemicals (Health and Safety) (Amendment, Consequential and Transitional Provision) Regulations 2026 (Draft)
Effective: To be confirmed
Proposes reforms to GB chemicals regimes including GB CLP, GB Biocidal Products Regulation and GB PIC. Dutyholders should monitor progress and prepare for transitional arrangements.
Significant amendments
Future Homes and Buildings Standards – Building Regulations amendments (England)
Updates Part L and Approved Document F, strengthening energy efficiency, ventilation and lowcarbon design expectations for new dwellings and non domestic buildings.
Simpler Recycling implementation guidance (England)
Clarifies separate waste collection requirements for households, workplaces and non domestic premises, with phased implementation and defined enforcement expectations.
ISO 14001:2026 (FDIS)
Confirms final requirements ahead of publication. Strengthens leadership accountability, climate and biodiversity considerations, lifecycle thinking and supply chain control within environmental management systems.
Electronic Commerce Regulations – removal of Country of Origin Principle
Repeals remaining EUderived provisions, removing preferential treatment for EEAbased providers and simplifying the UK electronic commerce framework.
Online Safety Act 2023 – CSEA reporting commencement
Brings into force mandatory reporting of child sexual exploitation and abuse content, associated criminal offences and Ofcom information gathering powers.
Employment Rights Act 2025 – commencement amendments
Commences further employment protections, including harass mentrelated disclosures, record keeping duties and collective consultation changes, with transitional provisions.
Guidance
Defra / Environment Agency – Simpler Recycling implementation guidance (England)
Provides detailed operational guidance on waste separation, roles and responsibilities, transitional arrangements and enforcement approach for businesses and waste collectors.
NCSC – updated guidance on supplychain security and cyber resilience
Reinforces a riskbased approach to managing supplier cyber risks. Emphasises governance, lifecycle management and alignment with emerging cyber resilience legislation.
ICO – Online Safety Act preparedness guidance
Clarifies how online safety duties interact with UK GDPR and PECR. Covers lawful basis, profiling, age assurance, transparency and governance expectations.
HSE – response and supporting material on chemicals regulatory reform
Confirms the policy direction for GB chemicals reform following consultation. Provides clarity on forthcoming changes to GB CLP, GB BPR and GB PIC regimes.
