The Electronic Commerce (Amendment and Consequential Provision) Regulations 2026 close off the last UK statutory references to the Country of Origin Principle in the e-Commerce Directive. The instrument was made on 13 April 2026, laid before Parliament on 16 April 2026 and, under regulation 1, comes into force on 7 May 2026. Signed for the Department for Science, Innovation and Technology by Parliamentary Under-Secretary of State Kanishka Narayan, the Regulations do not create a new digital regime. Their function is narrower and more technical: they remove residual protections and procedural limits that still applied to some EEA-based providers of information society services under retained EU law.
The Explanatory Note states that the change concerns Article 3 of Directive 2000/31/EC, commonly described as the Country of Origin Principle. In practical terms, that principle limited the extent to which a state receiving a digital service could impose its own rules on a provider established in another EEA state, except where a recognised derogation route was used. Those rules were carried into domestic law through the Electronic Commerce (EC Directive) Regulations 2002 and then preserved in part after EU exit. The 2026 instrument, made under sections 14(1) and 20(1)(b) of the Retained EU Law (Revocation and Reform) Act 2023, now removes the remaining pieces of that framework.
Regulation 2 makes the main operative change. It amends the Electronic Commerce (EC Directive) Regulations 2002 by deleting the remaining Country of Origin provisions, including the definition of the 'coordinated field', parts of regulation 4, regulation 5 and the Schedule. The Explanatory Note on legislation.gov.uk says those provisions had exempted EEA-based providers from certain UK market-access requirements in relation to the taking up or pursuit of an information society service. That included rules touching on qualification, authorisation or notification, and requirements linked to the quality or content of the service. From commencement, those specific exemptions fall away.
The same approach is applied to a set of criminal and enforcement-related instruments. Regulation 3 removes the remaining Country of Origin provisions from the Electronic Commerce Directive (Terrorism Act 2006) Regulations 2007. Regulation 4 does the same for the Extreme Pornography (Electronic Commerce Directive) (Scotland) Regulations 2011. Regulation 5 amends the Electronic Commerce (Miscellaneous Provisions) Regulations 2018 and also removes a review requirement. Across those instruments, the common legal effect is that proceedings against EEA-based providers of information society services will no longer depend on a Country of Origin derogation test in the same way. The Explanatory Note says the repealed text had prevented proceedings for certain offences unless a public interest derogation condition was met. That special route is now being removed.
The offences named in the note show where the practical effect is most visible. In the 2007 Regulations, the relevant provisions related to proceedings for encouragement of terrorism and dissemination of terrorist publications under the Terrorism Act 2006. In the Scottish 2011 Regulations, the provision concerned proceedings for possession of extreme pornography under section 51A of the Civic Government (Scotland) Act 1982. The 2018 Regulations covered a wider group of specified offences. For prosecutors and enforcement authorities, the change is not the creation of new offences or new penalties. It is the removal of a status-based protection that applied because a provider was established in the EEA. For firms offering cross-border digital services into the UK, compliance questions in these areas now sit more directly within domestic law, without the same residual internal market filter.
Regulations 6 to 8 make consequential amendments to EU exit instruments from 2019 and 2020. These delete references that would otherwise be left behind in the Electronic Commerce (Amendment etc.) (EU Exit) Regulations 2019, the Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 and the Criminal Justice (EU Exit) (Scotland) (Amendment etc.) Regulations 2020. That kind of statute book housekeeping matters in practice. Where a repeal leaves cross-references in place, advisers, courts and regulators can be left tracing provisions that no longer do substantive work. The 2026 instrument therefore has a tidying function as well as a direct policy effect.
The instrument records that sift requirements under Schedule 5 to the Retained EU Law (Revocation and Reform) Act 2023 were satisfied on 11 March 2026. The accompanying note also states that no full impact assessment has been produced because no, or no significant, effect on the private, voluntary or public sector is foreseen. An Explanatory Memorandum and de minimis assessment have been published alongside the Regulations. In policy terms, the measure is a targeted removal of legacy e-Commerce Directive rules rather than a wholesale rewrite of UK digital regulation. Its significance lies in legal alignment: EEA-based information society services lose the last domestic statutory carve-outs linked to the Country of Origin Principle, and UK authorities gain a clearer domestic footing when applying the relevant rules from 7 May 2026.