May 2026 - DG Legal Newsletter
DG legal is a one stop shop for legal consultancy. The team headed by David has such a broad spectrum of experience that they are always able to provide first class advice whatever the situation. Their ongoing compliance toolkit is extremely user friendly and they are always one step ahead of compliance updates. We have used DG since 2006 and in that time their offering has only got stronger.
Robert Borwick
Director | ABV Solicitors
Each month we provide our Retainer clients with a highly rated compliance bulletin covering what they need to know and what action they must take. We provide short summaries of our compliance bulletins as monthly newsletters.
Who should read this item: Data Protection Officers / Supervisors and Compliance Officers
Key Date: 19 June 2026
The Data (Use and Access) Act 2025
Thursday 28 May 2026
Key provisions in the Data (Use and Access) Act 2025 come into force on 19 June 2026.
This legislation, which is being phased in, updates the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations. Whilst the majority of the changes comprise minor relaxations of data protection requirements, some may still require firms to review processes and update privacy notices, although much of the anticipated ICO guidance is delayed.
Key changes include:
- the introduction of “recognised legitimate interests” allowing organisations to process personal data for defined public-interest purposes (e.g. crime prevention, safeguarding, emergencies) without conducting a balancing test, provided the processing is necessary.
- simplified rules on reusing data by clarifying when new purposes are considered compatible.
- for Data Subject Access Requests, firms only need ‘reasonable and proportionate’ searches and can pause deadlines for clarification but there are clearer timelines for responding.
- new complaint-handling duties require firms to facilitate data protection complaints, acknowledge them within 30 days, and respond without undue delay. Firms must also facilitate the making of complaints by taking steps such as providing a complaint form which can be completed electronically and by other means.
- international data transfers are eased by lowering the standard from ‘essentially equivalent’ to ‘not materially lower’ protection.
- cookie rules are also relaxed for low-risk uses such as analytics, while maintaining transparency and opt-out requirements.
Additional provisions strengthen children’s data protection and expand the use of automated decision-making, provided safeguards are in place.
Who should read this item: All Firms
Key Date: 22 June 2026
SRA Consultation on 2026-2027 Business Plan and Funding
Thursday 28 May 2026
The SRA has launched a consultation on its draft Business Plan and Funding requirements for 2026-2027.
Specific focuses include:
- operational excellence
- developing the ability to proactively identify and address risk
- focusing on the bigger issues.
Who should read this item: Compliance and Money Laundering Officers
Key Date: 29 June 2026
SRA AML and Sanctions Data Collection
Thursday 21 May 2026
The SRA is due to conduct its 2026 anti money laundering (AML) and sanctions data collection exercise in July 2026. This year, not all firms will be asked to complete it.
The exercise focuses on firms’ activities within scope of the Money Laundering Regulations 2017, their exposure to the UK sanctions regime, and their submission of suspicious activity reports. Those firms that have been selected to participate should take this time to prepare by reviewing the published specimen questionnaire and collating relevant data.
Contact us
To discuss how we can assist your firm meet the AML regulations, including preparing and updating a Firm Wide Risk Assessment, conducting an Independent AML audit (Regulation 21 audit), drafting compliant policies and procedures and providing AML training to your staff please get in touch by emailing consultants@dglegal.co.uk or by calling 01509 214 999.
Who should read this item: Managers and officers of firms undertaking conveyancing, trusts or probate work, tax adviser services and/or otherwise interacting with HMRC on behalf of clients.
Key Date: Registration by 17 August 2026 (for those that need to register in the first registration stage).
HMRC Tax Adviser Registration Live
Monday 18 May 2026
The HMRC’s online system for registering as Tax Adviser is now live. Some solicitors, including most residential conveyancers, who interact with HMRC on behalf of clients as part of their services will need to apply for an Agent Services Account (ASA).
A tax adviser, for these purposes, is broadly defined as any individual or organisation that assists others with tax affairs for payment, including advising, acting as an agent, preparing documents relied on by HMRC, or interacting with HMRC by phone, post, email, online messages, or submissions. This includes those filing SDLT returns or otherwise engaging with HMRC on behalf of clients. Registration applies to law firms, sole practices or freelancers even where tax work is incidental and even if they are based outside the UK.
There is a staged registration process commencing on 18 May 2026. When a firm, sole practice or freelancer needs to register will depend on their individual circumstances and they have 3 months from the date they need to register to apply for an ASA. Those that fail to register will be barred from interacting with HMRC on behalf of clients and may face sanctions.
Contact Us
To discover more about how we can help your firm with compliance issues, please call 01509 214 999, send us an email or complete our free enquiry form.