Britain Spent Five Years After Brexit Shielding EU Online Sellers From Its Own Consumer Law. That Shield Was Deleted on 7 May.

On 7 May 2026, a piece of European single-market law that had been protecting EU-established online sellers from British regulation quietly stopped existing. It had survived Brexit by five years and four months. Its removal was not announced in a press release, has not been written up by a single law firm we can find, and took effect through a negative statutory instrument that most of Parliament never voted on.

The instrument is the Electronic Commerce (Amendment and Consequential Provision) Regulations 2026, S.I. 2026/407. It was made on 13 April 2026, laid before Parliament on 16 April 2026, and came into force on 7 May 2026.

If your eyewear business is established in the EEA and sells into the United Kingdom, something changed for you nearly five months ago. This post is about what it was, and — just as important — what it was not.

The date is in the clause, but the clause doesn’t contain a date

Regulation 1 of S.I. 2026/407 says, verbatim:

“These Regulations come into force on the 21st day after the day on which they are laid before Parliament.”

There is no calendar date anywhere in the commencement provision. You get the date by taking the laying date — 16 April 2026 — and counting. That produces 7 May 2026, which is the date legislation.gov.uk now shows against every omitted provision.

We flag this because we have been caught by the opposite problem before. When we wrote about Britain’s low-value import reform, every source quoted a deadline that appeared only in the policy paper published beside the draft legislation — the commencement clause itself contained no date at all. Here the clause contains no date either, but for a different reason: it contains a formula. A formula is not an absence. It resolves to exactly one day, and that day has passed.

What was actually repealed

S.I. 2026/407 amends seven instruments. That number matters, and we will come back to it. The one that matters commercially is the Electronic Commerce (EC Directive) Regulations 2002, S.I. 2002/2013 — the UK’s implementation of the old e-Commerce Directive.

From those 2002 Regulations, S.I. 2026/407 removes:

• the definition of “coordinated field” in regulation 2(1);
• regulation 4, paragraphs (3), (4), (5) and (7);
• regulation 5 in its entirety — it now reads, on the statute book, as a row of dots;
• the Schedule.

Regulation 4(3) was the operative provision. Before its removal it read:

“Subject to paragraphs (4), (5) and (6) below, any requirement shall not be applied to the provision of an information society service by a service provider established in a member State for reasons which fall within the coordinated field where its application would restrict the freedom to provide information society services to a person in the United Kingdom from that member State.”

Read it slowly, because it is written backwards from how you would expect. It does not grant a permission. It withdraws one — from the United Kingdom. It says that a UK requirement shall not be applied to an online service coming in from a member State, where applying it would restrict that service’s freedom to reach a person in the UK.

That is the country-of-origin principle. An online business established in Paris or Milan was regulated, in the relevant areas, by France or Italy — not by Britain, even when its entire customer base was British. And the government’s own record says plainly what S.I. 2026/407 did to it. From the Assimilated Law Parliamentary Report covering December 2025 to June 2026, verbatim:

“Additionally, The Electronic Commerce (Amendment and Consequential Provision) Regulations 2026 remove the country-of-origin principle (CoOP (country-of-origin principle)) to ensure an even playing field for UK businesses.”

This was not an oversight. Britain rebuilt the shield in 2019 and kept it

The easy story here would be that a bit of EU law got left behind in the Brexit tidy-up and someone finally noticed. That is not what happened, and the statute book is unusually clear about it.

Regulation 4 of the 2002 Regulations originally had two limbs. Paragraph (1) was the outbound limb: a UK-established provider had to comply with UK coordinated-field requirements “irrespective of whether that information society service is provided in the United Kingdom or another member State”. Paragraph (2) put an enforcement duty on UK authorities to make that happen. Paragraph (3) was the inbound limb quoted above.

Paragraphs (1) and (2) were omitted on 31 December 2020 by the Electronic Commerce (Amendment etc.) (EU Exit) Regulations 2019, S.I. 2019/87. Britain dropped the obligation on its own businesses at the end of the transition period.

Paragraph (3) was not dropped. It was edited to keep working. S.I. 2019/87, regulation 3(4), did the following:

• deleted the words “other than the United Kingdom” from paragraph (3), so that it kept operating sensibly once the UK was no longer a member State;
• amended paragraph (4) so that it now qualified paragraph (3) alone, the other two limbs having gone;
• changed “another” to “a” in paragraph (5), for the same reason;
• inserted a new paragraph (7): “In paragraph (5), ‘Community acts’ means Community acts as existed immediately before exit day.”;
• and — the detail that settles the question of intent — replaced the heading of regulation 4. “Internal market” became “Non-UK service providers – restriction on application of requirements”.

You do not rename a provision to describe its new function, rewire its cross-references and freeze one of its defined terms if you have forgotten it is there. Britain deliberately converted a reciprocal single-market rule into a one-way shield for EEA-established online sellers, and ran it that way for five years and four months.

The three words that decide how much of this touches eyewear

Here is where a confident post would go badly wrong. It is tempting to conclude that EEA sellers are now exposed to the full weight of UK product law. They are not, and the reason is in the definition that S.I. 2026/407 also deleted. “Coordinated field” meant:

“requirements applicable to information society service providers or information society services, regardless of whether they are of a general nature or specifically designed for them, and covers requirements with which the service provider has to comply in respect of— (a) the taking up of the activity of an information society service, such as requirements concerning qualifications, authorisation or notification, and (b) the pursuit of the activity of an information society service, such as requirements concerning the behaviour of the service provider, requirements regarding the quality or content of the service including those applicable to advertising and contracts, or requirements concerning the liability of the service provider, but does not cover requirements such as those applicable to goods as such, to the delivery of goods or to services not provided by electronic means”

Goods as such. Those three words are the whole scope question.

A shield only ever covered what it covered. Repealing it can only expose you to the rules that were inside it. And requirements applicable to goods as such were never inside it. Which means:

• the rules on whether a frame is personal protective equipment or a medical device — never shielded;
• UK product safety duties, including the new framework Britain is still consulting on — never shielded;
• labelling on the frame, the lens or the case — never shielded;
• anything to do with delivery of the goods — expressly excluded.

What was inside the coordinated field is the other half of your shopfront: advertising, contracts, the behaviour of the seller, and the seller’s liability. The words “those applicable to advertising and contracts” are in the definition.

So this repeal does not touch your frames. It touches your copy, your claims, your checkout and your reviews.

The thirteen-month gap — and this part is our reading, not a quoted rule

Now the interesting bit, and we want to be explicit that the following is an inference we are drawing from two provisions, not something any source states.

Regulation 4(5) carved a hole in the shield. It said the requirements that could not be applied to an incoming EEA service:

“does not include any requirement maintaining the level of protection for public health and consumer interests established by Community acts.”

So UK rules that merely maintained the consumer-protection level set by EU acts were never shielded in the first place. And paragraph (7), inserted in 2019, froze what that meant: “Community acts as existed immediately before exit day.”

A carve-out pinned to EU law as it stood on 31 December 2020, sitting inside a live shield, while UK consumer law kept moving. On our reading, that produces a straightforward consequence: UK consumer requirements that merely restated the inherited EU position fell through the carve-out and always applied to EEA sellers. UK consumer requirements that went beyond the end-of-2020 EU level did not.

Which brings us to Part 4, Chapter 1 of the Digital Markets, Competition and Consumers Act 2024. It came into force on 6 April 2025 by S.I. 2025/272, which commenced “Chapter 1 (protection from unfair trading) of Part 4 (consumer rights and disputes), except sections 232, 234 and 235”, together with “Schedule 20 (commercial practices which are in all circumstances considered unfair)”.

Much of Chapter 1 is the old inherited regime in new clothes. Section 225 — “Unfair commercial practices are prohibited.” — and the misleading actions and omissions provisions at sections 226 and 227 will look familiar to anyone who knew the 2008 Regulations. On our reading, those were never shielded.

But some of it is genuinely new. Schedule 20, paragraph 13 bans “Submitting, or commissioning another person to submit or write— (a) a fake consumer review”, and paragraph 13(5)(b) defines that as “a review that purports to be, but is not, based on a person’s genuine experience”. Paragraph 13(1)(b) catches “a consumer review that conceals the fact it has been incentivised”. Section 230 requires material information, including the total price, in an invitation to purchase. There was no equivalent of the fake-review prohibition in the law Britain inherited at the end of 2020.

If that analysis is right — and we stress it is ours — then between 6 April 2025 and 7 May 2026 there were roughly thirteen months in which an EEA-established online eyewear seller was subject to Britain’s inherited consumer rules but had a real argument that Britain’s new ones could not be applied to it. That argument died on 7 May 2026. We have found no case, no regulator statement and no commentary either way. If you relied on it, you should stop.

Before and after, by area

What about selling the other way — UK store into the EU?

This is the cross-jurisdiction check, and the answer is duller than you might hope, which is why it is worth stating.

Article 3 of Directive 2000/31/EC is still in force across the EEA. Article 3(1): “Each Member State shall ensure that the information society services provided by a service provider established on its territory comply with the national provisions applicable in the Member State in question which fall within the coordinated field.” Article 3(2): “Member States may not, for reasons falling within the coordinated field, restrict the freedom to provide information society services from another Member State.”

“From another Member State.” A UK-established eyewear store is not established in a Member State. It never had the benefit of Article 3 after the transition period ended, and S.I. 2026/407 does not change that.

So the repeal does not create an imbalance. It removes one. For five years the asymmetry ran in favour of EEA sellers shipping into Britain; since 7 May 2026 neither side gets home-state treatment across the Channel. That is exactly what the government said it was doing — “to ensure an even playing field for UK businesses” — and on this occasion the official description of an instrument matches what the instrument does.

One thing worth noticing: an EEA seller selling into another EEA state still has Article 3. So Britain is now the European market where establishment buys you nothing.

Where this sits in a pattern we keep finding

We have now written three posts about Britain and they are the same instinct three times over: there should be somebody reachable who answers for this. The low-value import reform gets there through a jointly liable UK fiscal representative. The proposed product safety framework gets there by deeming an overseas seller to be the producer. This one gets there by deleting the provision that told UK regulators to stand back.

The difference is that the first two are proposals with no commencement date. This one is in force and has been since May.

What to actually do

1. Establish where your selling entity is established, in the sense the 2002 Regulations used — a fixed establishment, pursuing economic activity for an indefinite period. Servers and a domain name do not create one. If the entity is UK-established, none of this changes anything for you.
2. If it is EEA-established and sells into the UK, stop treating UK advertising and contract rules as somebody else’s problem. That is the change.
3. Audit your reviews first. Schedule 20, paragraph 13 is the clearest example of a UK rule with no end-of-2020 EU equivalent. Incentivised reviews where the incentive is not made apparent are squarely in it.
4. Check your invitations to purchase for the total price, including mandatory charges, at the point the price is first shown — not at the last step of the checkout.
5. Re-read your on-site claims against UK rules, not only EU ones. If you tightened your copy for the EU’s new rules on environmental claims, that work does not automatically satisfy a different regulator applying a different test.
6. Look at your synthetic imagery and model disclosures on the UK-facing site separately. We have written about how disclosure rules for AI-generated models differ by jurisdiction and by medium; the UK is now a jurisdiction that reaches you directly.
7. Do not change anything about your frames, lenses, cases or packaging on account of this instrument. “Goods as such” was never in the coordinated field. If you start re-labelling products because of S.I. 2026/407, you have misread it.

Frequently asked questions

Was this in force before I heard about it?
Yes. It came into force on 7 May 2026. We found no law-firm commentary on it at all, which is part of why we wrote this.

Does this mean UK product safety law now applies to me for the first time?
No. Requirements applicable to goods as such were expressly outside the coordinated field, so they were never restricted by regulation 4(3). Nothing about your products changed on 7 May 2026.

I’m an EEA seller. Was I really exempt from UK advertising law before?
Not exempt. Regulation 4(3) said UK requirements “shall not be applied” for reasons within the coordinated field where doing so would restrict the incoming service — and regulation 4(5) pulled requirements that maintained the inherited EU consumer-protection level back out of that. The practical effect was narrower than “exempt” and, as far as we can establish, never litigated in this context.

Is the thirteen-month gap you describe an established legal position?
No. It is our reading of regulation 4(5) together with paragraph (7)’s freezing of “Community acts” at exit day, applied to the DMCCA’s genuinely new prohibitions. No source we found states it. Treat it as an explanation of why the repeal matters, not as advice about past conduct.

How much can the CMA fine me?
The CMA gained direct consumer enforcement powers alongside the DMCCA regime, and legal commentary consistently puts the maximum at up to 10% of global turnover. We have not verified that figure against a specific section of the Act and are reporting it as secondary.

Seven instruments were amended. Do the other six matter to me?
Almost certainly not. Besides the 2002 Regulations, S.I. 2026/407 amends the Electronic Commerce Directive (Terrorism Act 2006) Regulations 2007, the Extreme Pornography (Electronic Commerce Directive) (Scotland) Regulations 2011, the Electronic Commerce (Miscellaneous Provisions) Regulations 2018, the Electronic Commerce (Amendment etc.) (EU Exit) Regulations 2019, the Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019, and the Criminal Justice (EU Exit) (Scotland) (Amendment etc.) Regulations 2020. The last three are consequential and criminal-justice tidying. We note them because the explanatory memorandum published when the draft went to sift listed four instruments, and the instrument as made amends seven — a reminder to read the made version rather than the paperwork that preceded it.

What happened to regulation 5?
It was the derogations provision — the route by which a UK authority could take measures against an incoming service despite regulation 4(3). With the shield gone, the derogation from the shield had nothing to do, and it was omitted in full. On the statute book it now appears as a line of dots.

Does this apply in Northern Ireland?
We have not established the extent position and are not going to guess. The instrument amends Scottish instruments, so it plainly reaches Scotland. Northern Ireland’s goods regime differs from Great Britain’s in ways we have flagged before and have not researched here. If you sell into Northern Ireland, take advice on extent.

Is the country-of-origin principle gone from UK law entirely?
S.I. 2026/407 removes it from the seven instruments listed above. We have not audited the whole statute book for other traces of it, and we are not claiming there are none.

General information, not legal advice. This post describes S.I. 2026/407 and related instruments as we read them on 28 September 2026. The characterisation of a thirteen-month gap in the application of the DMCCA’s new prohibitions to EEA-established sellers is our own inference from regulation 4(5) and regulation 4(7) of S.I. 2002/2013, is not stated by any source we found, and has not to our knowledge been tested. The maximum CMA penalty figure is taken from secondary commentary and not verified against the Act. We have not established the extent of S.I. 2026/407 in Northern Ireland. Nothing here asserts anything about VisioncarePro’s own compliance status. Take advice on your own circumstances before changing how you sell.

Sources: The Electronic Commerce (Amendment and Consequential Provision) Regulations 2026, S.I. 2026/407 (made version, legislation.gov.uk) · The Electronic Commerce (EC Directive) Regulations 2002, S.I. 2002/2013, regulations 2, 4 and 5 and the Schedule, current consolidated version showing omissions effective 7 May 2026 · The Electronic Commerce (Amendment etc.) (EU Exit) Regulations 2019, S.I. 2019/87, regulation 3 · Explanatory Memorandum to the Electronic Commerce (Amendment and Consequential Provision) Regulations 2026 sent to sift, GOV.UK · Assimilated Law Parliamentary Report: December 2025 to June 2026, executive summary, GOV.UK · UK Parliament Statutory Instruments tracker, proposed negative instrument record · Digital Markets, Competition and Consumers Act 2024, Part 4 Chapter 1 and Schedule 20 · The Digital Markets, Competition and Consumers Act 2024 (Commencement No. 2) Regulations 2025, S.I. 2025/272 · Directive 2000/31/EC, Articles 2(h) and 3 · CMS legal update on the DMCC Act consumer provisions (secondary, for the penalty figure only).