£6 million in consumer law fines issued by the UK’s Competition and Markets Authority

On 14 October 2026, the UK’s main consumer law regulator, the Competition and Markets Authority (CMA), issued three fines totalling £6 million and ordered £440,000 in refunds for consumers in relation to breaches of consumer law.

Time-limited offers: Wayfair

Wayfair ran ‘Daily Deals’ and 24-hour ‘Flash Deals’ on its website, reinforced by slogans such as ‘Here Today, Gone Tomorrow’ and countdown timers – techniques usually implemented to create hype and encourage shoppers to act fast to secure the best price. The regulator found that a significant number of these products stayed on sale at the same (or lower prices) once the advertised deadline had passed. The CMA concluded that presenting offers in this way unfairly pushed consumers into buying products quickly when there was no need to rush. The CMA issued a £4.8 million fine to Wayfair.  

Time-limited offers and pre-ticked checkboxes: Appliances Direct

The CMA found that Appliances Direct was signing customers up automatically (without their express consent) to paid extras, such as an appliance recycling scheme and an installation service. The Consumer Contracts Regulations 2013 require that a business must obtain a consumer’s express consent to any additional add-on payments; pre-ticked boxes are not sufficient for this purpose.

Separately, the retailer displayed countdown banners on product pages advertising £10 – £25 discounts as only available for a limited time. However, the CMA found the same discount codes re-surfaced several times over the following days. The CMA considered that this unfairly pressurised consumers into making purchases. Appliances Direct was fined £1.2 million and ordered to repay around £432,000 to affected customers in relation to the additional charges.

Mandatory joining fee: Gold’s Gym

The CMA found that Gold’s Gym, a London-based UK gym franchise, omitted the joining fee from the headline price quoted to consumers, or otherwise failed to show the total price in a clear way. The regulator found that these practices infringed the ‘drip pricing’ rule under the Digital Markets, Competition and Consumers Act 2024 (DMCCA). Under those rules, an “invitation to purchase” omits material information (in breach of consumer law), if it fails to state the total price of a product, which must include any fees, taxes, charges or other payments the consumer will necessarily incur. Gold’s Gym has been ordered to refund consumers £9,220 and has been fined £45,000.

Key takeaways

  • Growing scrutiny: The CMA has been flexing its muscles since the introduction of direct fining powers under the DMCCA. In the last 18 months, it reports issuing fines of more than £12 million and ordering nearly £2.4 million in refunds for consumers. Online sales tactics are a live risk area, and enforcement in this space is ongoing. Business-to-consumer brands should be routinely checking their marketing claims and customer purchase journeys in light of this increasing scrutiny.
  • Audit time-limited offers: Pressure selling and false urgency have been on the CMA’s radar for some time (at least since the March 2023 pressure selling guidance). If a deal is marketed as ending on a specific date, make sure it genuinely does not continue on discount (or a comparable discount) after that date. This type of practice is also relatively easy for the CMA to spot and evidence on its own initiative – simply by monitoring a website and recording prices over time.
  • Remove pre-ticked boxes: Any optional extras (recycling, installation, insurance, etc.) must require the customer to actively opt in; default opt-ins are not sufficient consent.
  • Show the total price upfront: Mandatory fees, including joining or admin fees, must be included in the headline price shown to the customer, and not revealed later in the purchase journey.

CPC Network enforcement actions on in-game currencies: what video game companies need to know

Last week, the EU Consumer Protection Cooperation Network (CPC Network) launched a coordinated enforcement action against nine video game companies in relation to the use of in-game currency.

The CPC Network is a network of national authorities responsible for enforcing EU consumer protection laws and serves as the vehicle for coordinated cross-border enforcement. Given the international nature of video games, the CPC Network elected to pursue an EU/EEA-wide enforcement approach under the CPC Regulation.

These announcements from the European Commission and the CPC Network mark the next phase in the tussle between regulators and the video game industry over what consumer law compliance should look like for in-game currencies. A spate of press releases from national consumer authorities also echoed the announcements with some stern words from officials (including Ireland, Sweden, and the Netherlands).

The CPC Principles

These enforcement actions relate to the CPC Network’s “Key Principles on In-game Virtual Currencies” (Principles), published in March 2025. The CPC Network takes the position that premium in-game currency (i.e. currency purchased with real-world money) obscures the real value of in-game content and is a mechanism through which companies try to deny certain mandatory consumer rights. Core to the CPC Network’s argument is that premium in-game currency constitutes a “digital representation of value”. If a consumer spends that premium in-game currency, the consumer should be entitled to the same protections which arise when real-world money is spent, including pre-contractual information rights and 14-day withdrawal rights. However, there are serious and growing concerns in industry about whether the Principles apply the underlying consumer protection laws correctly. If you are interested in further detail on this, you can also read our article on the CJEU Runescape Gold case here.

Briefly, the actions seek to ensure the following are applied from the Principles:

  • Real-world pricing: real-world prices must be displayed for in-game items and in-game currencies.
  • Obscuring costs: game companies should not implement multiple types of in-game currencies or exchange pathways that obscure the true cost of in-game items.
  • Forced spend: players should not feel obligated to buy an unnecessary amount of in-game currency in order to progress or enjoy the game.
  • Clear pre-contract information: players should be presented with clear pre-contract information concerning their purchase before the transaction for their in-game items or in-game currencies is completed.
  • Withdrawal rights: players must be told about their 14-day withdrawal rights prior to purchase, which includes their right to withdraw in respect of unused in-game currency.
  • Transparent terms: the terms and conditions governing in-game currency must be fair and transparent as required under consumer law.
  • Vulnerable consumers: vulnerable players are afforded a greater degree of protection under consumer law, and so appropriate safeguards should be put in place, particularly for children.

Interestingly, the CPC Network appears to be treating compliance with the Principles (which are not law) as mandatory, given that the enforcement actions are specifically directed at enforcing them.

Disappointingly, the Principles have not been amended since their publication in March 2025, suggesting that stakeholder dialogue was not as productive as it could have been. The European Commission notes this, saying “As the dialogue did not bring satisfactory results, the Network proceeded with a market check and identified several games, which would require further assessment”.

In addition to enforcement of the Principles, the CPC Network is also taking action on broader issues including personal data collection, addictive game design, parental control settings, direct marketing to children, and the blocking of gaming accounts. Its Joint Statement also signals particular attention on variable reward systems (e.g. loot boxes) and dark patterns.

Key takeaways

  • These actions are part of the already intensifying regulatory scrutiny of the video game industry across Europe, particularly on in-game transactions, in-game currencies and the protection of vulnerable users.
  • Given the ongoing debate about the legal basis for the Principles, some in the industry had been waiting for the outcome of the stakeholder dialogue before committing to compliance roadmaps. That dialogue has not led to a resolution, and the CPC Network is proceeding to enforcement.
  • The CPC Network is treating the Principles as requiring mandatory compliance and calling on all video game companies (not just those named in the coordinated actions) to review their practices and ensure compliance. However, this is not accompanied with any further guidance on how compliance with the Principles can be achieved in the real world, given that a literal interpretation of some of them (such as the requirement to provide pre-contractual information and post contract purchase confirmations for each in-game item purchase) would be unworkable in practice, not to mention deeply undesirable for consumers.
  • We expect more clarity to flow out of these enforcement actions. Until then, the prudent approach for studios and publishers is to review their practices in respect of in-game currencies, and consider how closely they can align with the Principles without fundamentally breaking the game.

UK Government announces plans for a social media ban and additional measures to protect younger audiences

The UK Government today announced plans to introduce a social media ban for under-16s, alongside a range of additional measures intended to safeguard younger audiences. Key drivers of the ban are stated to be children’s mental health and wellbeing, in addition to concerns over exposure to harmful content online.   

The ban is expected to be brought in before the end of this year, and to take effect from Spring 2027. It follows largely the same model as the Australian social media ban, which was introduced earlier this year, but with some additional measures. The Government has been taking preparatory steps so that the ban can be implemented quickly – including through changes to the UK Online Safety Act via the Children’s Wellbeing and Schools Act 2026. These changes empower the Secretary of State to introduce rules to prevent children’s access to “specified internet services” or their functionalities.

In addition to banning social media, the ban also promises a restriction on “harmful functions”, such as livestreaming and stranger communication with children for under-16s. The Government says that these restrictions will apply to a wide range of online services, including so-called “gaming sites” where adults can be paired with children (the exact meaning of which is not provided).

In parallel to this, the Government has said that it plans to introduce more Highly Effective Age Assurance (HEAA) to support compliance and make it harder for children to bypass restrictions – an issue which has plagued the equivalent restrictions in Australia.

The Secretary of State wrote to Ofcom to ask for an urgent review of Ofcom’s enforcement capabilities, and for Ofcom to publish an enforcement strategy. Ofcom has responded at lightning pace to confirm its commitment to working alongside Government to ensure the protections will be effective, robust and introduced quickly. Further, its updated enforcement strategy will be published in due course.

While details of the plans are still thin, a few immediate concerns arise. For example, the scope of what platforms will be caught within this is unclear. The announcement openly says that Snapchat, TikTok, YouTube, Instagram, Facebook and X will be caught; and that messaging services like WhatsApp will not. However, the outer limit of the scope are not clear. This will cause concern for providers of mixed services, such as online multiplayer video games which contain a mixture of solo content, multiplayer content, chat/social functions and UGC.

At a time when studios and publishers have only just got to grips with their obligations under the UK Online Safety Act and the EU Digital Services Act, this is not what they will want to hear. The UK Online Safety Act is a comprehensive law, requiring many providers to implement safety measures which are designed specifically to protect children. For example, informational resources for children, child-friendly anonymous ways to report harmful content, internal policies for children protection, training, performance targets etc. A lot of these efforts could be in vain (or need significant update) if then U16s are simply blocked from the service (or the communications part of it).

Partner Kostyantyn Lobov said: “Like most of these laws, the games industry is not the primary target here but, once again it will be caught in the crossfire. If we continue to put games into the same bucket as social media then, sadly, developing and incorporating multiplayer interaction features may eventually not be worth it for smaller and medium-sized studios. The irony is that multiplayer games can foster social interaction and create meaningful friendships, in a way that doomscrolling your favourite social media app does not.”

We will be monitoring these plans in the coming months and will post further updates as needed, but the key takeaways are as follows:

  • Law expected in late 2026, coming into force in Spring 2027.
  • Social media platforms will be banned for under 16s.
  • “Harmful functions” like livestreaming and stranger comms will be restricted for under 16s.
  • Expanded roll out of Highly Effective Age Assurance (HEAA).
  • Ofcom to publish an enforcement strategy.
  • Mixed services, such as some online multiplayer games, likely to be at least partly within scope.

For further information please contact Kostyantyn Lobov or Sophie Lewis.

Finalist for Business Services Team of the Year at the Legal Business Awards 2026

We have been shortlisted for Business Services Team of the Year at the Legal Business Awards 2026.

The Legal Business Awards is a key annual event in the UK legal sector, highlighting excellence in law across more than 26 different categories. The awards aim to showcase individuals, teams and firms in the UK legal space who have made a significant mark in the profession or within their firm. The awards ceremony will take place on the evening of Tuesday 29 September at the JW Marriot Grosvenor House London, where the winners will be announced.

Our shortlisting recognises the contribution of our business services function in shaping the firm’s strategy and driving its success, with particular focus on the achievements of our People & Culture team, including its provision of HR consultancy directly to our clients. Through our innovative Client Sight framework, which forms the architecture of how the firm operates, we put our clients and their priorities first by understanding how they see us, what they value and what they need.

Client Sight underpins the firm’s approach to all aspects of its business service function and guides our decision-making, from people and recruitment, to innovation, to business development and marketing. This enables us to foster genuine collaboration and build relationships across all functions, pushing us outside the more restrictive lines of a traditional law firm. We are delivering measurable outcomes, attracting remarkable talent and creating deeper client relationships.

This latest recognition of the firm’s business services function follows the news of us winning Business Development Team of the Year at the LexisNexis Legal Awards 2026. We were also recently named as a finalist for Law Firm of the Year: The Independents at The Lawyer Awards 2026.