Rules and ethics
Part of Social media training rules and compliance: adjustments, accounts, assets
Social media training UK regulations: who owns each?
Social media training UK regulations for England: see which rules may apply, who oversees them and when specialist review is needed.
Social media training UK regulations do not form one licensing regime. For an England course, first identify whether the activity is selling training, advertising it, handling learner data, requiring workers to attend, using protected material, accessing a live account or delivering a funded or regulated education product. Each answer leads to a different source and reviewer.
What to take away
- Social media training in England has no single licence; each activity leads to a different source and reviewer.
- The Data (Use and Access) Act 2025 amends UK GDPR, the Data Protection Act 2018 and PECR rather than replacing them.
- The CAP Code does not have the force of law even though it operates alongside statutory rules.
- Do not use accredited, regulated or government funded as loose quality labels; verify the exact qualification or funding record.
- Keep privacy, PECR, advertising, consumer, equality, security, IP, education, employment, tax, finance and procurement decisions separate.
Put each source in the right legal box
| Area | Current source and scope | Evidence decision |
|---|---|---|
| Personal information and electronic communications | UK GDPR, Data Protection Act 2018 and PECR, amended by the UK-wide Data (Use and Access) Act 2025 | Purpose, role, lawful basis, transparency, rights, retention, security and PECR rule |
| Consumer sales and marketing | Part 4 of the DMCC Act 2024 and CMA guidance for UK business-to-consumer practices | Offer, price, omission, review, urgency and outcome-claim evidence |
| Non-broadcast advertising | CAP Code across its stated UK remit | Recognition, substantiation and sector-code review |
| Equality and service access | Equality Act 2010 in Great Britain; Northern Ireland has separate law | Anticipatory service adjustments and employment-specific decisions |
| Education status | Ofqual register for England and Northern Ireland; programme-specific England funding rules | Exact qualification, awarding organisation, provider and funding record |
| Public procurement | Procurement Act 2023 for covered authorities, with territorial and reserved-function limits | Applicable route, authority, value and contract record |
Who owns each rule or source
| Rule or source | Responsible owner or regulator |
|---|---|
| UK GDPR, Data Protection Act 2018 and PECR | The ICO regulates relevant data-protection and electronic-communications requirements; courts determine legal disputes. |
| Data (Use and Access) Act 2025 | Parliament enacted the Act; the ICO regulates relevant data-protection requirements. Check the Act’s commencement provisions to establish when amendments apply. |
| Digital Markets, Competition and Consumers Act 2024, Part 4 | The CMA leads enforcement of unfair commercial practices, alongside other authorised enforcers such as local authority Trading Standards. |
| CAP Code | CAP writes the Code and ASA administers it through non-statutory self-regulation; statutory advertising and consumer rules have their own enforcers. |
| Equality Act 2010 | Providers must meet applicable duties; the Equality and Human Rights Commission (EHRC) promotes and enforces equality law, while courts and tribunals hear individual claims. |
| Copyright, Designs and Patents Act 1988 | Copyright belongs to the rights holder. The Intellectual Property Office (IPO) provides information and policy guidance; civil courts generally decide infringement disputes. |
| Employment Rights Act 1996 | The employer is responsible for its duties to workers. Acas provides guidance and conciliation; employment tribunals and courts decide claims. |
| Value Added Tax Act 1994 | HMRC administers VAT; the seller is responsible for determining the tax treatment of its own supplies. |
| Financial Services and Markets Act 2000 | The FCA regulates authorised firms and relevant regulated activities; whether it applies depends on what the provider actually does. |
| Network and Information Systems Regulations 2018 | The Regulations apply only to in-scope operators and service providers. They designate competent authorities by sector, including the ICO for in-scope digital service providers; the NCSC provides cyber-security guidance, not general regulatory enforcement. |
| Procurement Act 2023 | The contracting authority is responsible for its procurement. The Cabinet Office’s Procurement Review Unit oversees procurement compliance. |
| Regulated qualifications in England | Ofqual regulates qualifications and awarding organisations within its remit; check the official register. |
| Adult Skills Fund rules in England | Responsibility depends on the funding arrangement: DfE or DWP rules apply to the relevant funded provision. |
The Data (Use and Access) Act 2025 amends rather than replaces the UK GDPR, Data Protection Act 2018 and PECR. Check the Act’s commencement provisions to establish which amendments apply to the activity. The ICO regulates relevant data-protection requirements; the Act itself is the statutory record.
For consumer-facing sales, the CMA's unfair-commercial-practices guidance explains the DMCC Act provisions applying to commercial practices from 6 April 2025. The guide expressly is not a definitive interpretation. Record whether the purchaser is acting mainly outside their business before using consumer-contract conclusions.
The CAP Code is different again. Its scope page says the Code does not have the force of law, even though it operates alongside statutory rules. Training should identify the applicable Code section, say that CAP writes and ASA administers the Code, and identify the separate legal enforcer where statutory rules apply rather than calling ASA/CAP advice "advertising law" without qualification.
Make education claims verifiable
Do not use "accredited", "regulated" or "government funded" as loose quality labels. The official regulated-qualification search identifies qualifications and awarding organisations regulated in England and Northern Ireland, with separate links for Wales and Scotland. If the exact offer is absent, describe what the learner actually receives.
Likewise, the Adult Skills Fund rules apply to specified DfE or DWP-funded provision in England. They are not terms for every privately purchased workshop.
Escalate the facts, not a checklist score
Create one row per activity with person, geography, purpose, legal role, source class, evidence, owner and review date. Keep privacy, PECR, advertising, consumer, equality, security, IP, education, employment, tax, finance and procurement decisions separate. A platform permission or signed provider contract cannot substitute for any of them.
Before launch, named UK counsel and the relevant privacy, advertising, equality, accessibility, security, IP, education, employment, tax, finance and procurement specialists must review the actual offer. Recheck law and guidance on the release day; this desk overview cannot provide a compliance determination.
Before you act
- Identify the activityselling, advertising, data handling, worker attendance, protected material, live account or funded education.
- Record the purchaser's status before applying consumer-contract conclusions.
- Check the exact qualification on the Ofqual register and note the awarding organisation.
- Confirm whether Adult Skills Fund rules apply to the specified provision.
- Create one row per activity with person, geography, purpose, legal role, source class, evidence, owner and review date.
- Have named UK counsel and relevant specialists review the actual offer before launch.
Common questions
Does the Data (Use and Access) Act 2025 replace the UK GDPR?
No. The Data (Use and Access) Act 2025 amends rather than replaces the UK GDPR, Data Protection Act 2018 and PECR. Check the Act’s commencement provisions to establish which changes apply to the activity; the ICO regulates relevant data-protection requirements.
Can I call my course government funded if it is not on the Adult Skills Fund?
No. The Adult Skills Fund rules apply to specified DfE or DWP-funded provision in England. They are not terms for every privately purchased workshop. If the exact offer is absent from the official regulated-qualification search, describe what the learner actually receives.
Is the CAP Code the same as advertising law?
No. The CAP Code's scope page says the Code does not have the force of law, even though it operates alongside statutory rules. Training should teach the applicable Code section and the legal owner rather than calling ASA/CAP advice advertising law without qualification.
