Ethical Marketing: Principles for Responsible Commercial Decisions

Ethical marketing is the disciplined practice of considering how marketing decisions affect customers and other stakeholders, rather than only whether those decisions are commercially effective or technically lawful.

It asks whether claims are truthful, whether material information is understandable, whether choices are meaningful, whether treatment is fair, and whether foreseeable harm has been considered. It also asks who benefits, who carries the risk, and who is accountable when customer and commercial interests conflict.

Those questions apply to advertising, pricing, targeting, personalisation, product presentation, customer journeys, environmental claims and post-purchase communication. They cannot be reduced to a slogan, or to an assumption that anything legally permitted is responsible.

This article explains the principles organisations can use to reach and document ethical marketing decisions. Teams reviewing a specific campaign should use the separate ethical campaign review checklist.

Scope note: This is an ethical decision framework, not legal advice. Applicable law depends on the jurisdiction, sector, audience, product and communication channel.

What ethical marketing means

Ethical marketing concerns the standards by which an organisation decides what it should do when creating, targeting, presenting and managing commercial activity.

A workable definition is this:

Ethical marketing is the application of honesty, transparency, fairness, autonomy, proportionality, accountability and harm prevention to decisions that influence customers or other affected stakeholders.

Three features of that definition matter.

First, ethical marketing concerns decisions and conduct, not brand positioning. A values statement cannot compensate for misleading prices, coercive interfaces or unsupported claims.

Second, it covers the whole experience. A clear advertisement followed by a confusing checkout, an obstructive cancellation journey or inappropriate targeting is not an ethically coherent experience, whatever the advertisement said.

Third, the question is not only whether the organisation intended to behave responsibly. Teams must also consider the decision’s likely effects, the evidence available, and the position of people with less information, less bargaining power or less capacity to absorb harm.

Professional marketing codes commonly emphasise avoiding harm, integrity, honesty, responsibility, fairness and transparency (1). Stakeholder-oriented marketing research argues that these decisions should be assessed from a societal rather than exclusively firm-centred perspective (2).

I want to add something about where these decisions actually get made, because the literature tends to assume a level of self-awareness that I did not often encounter. In enterprise conversations, buyers would open by saying they wanted to improve the customer experience. When I asked what was wrong with the current one, the room usually went quiet. They knew something was not working, because growth or performance told them so, and they had no clear idea what it was. People in that position are not being cynical. They are buying capability in the hope that it will locate the problem for them, and they will click every button available until something moves.

That matters here for one reason. A team that cannot articulate what a decision is for cannot assess whether it is fair, proportionate or harmful, because there is nothing specific to assess. Most of the ethical failures I have seen were not decisions somebody made badly. They were decisions nobody quite made.

Ethics is broader than compliance

Legal compliance sets mandatory boundaries. Ethical judgement asks whether a decision is responsible within those boundaries, and in situations the law does not fully anticipate.

The distinction matters because several different types of standard may apply at once, and they are not interchangeable:

Status	Meaning	Example
Legal requirement	An obligation imposed by legislation or enforceable regulation	UK prohibitions on misleading and aggressive commercial practices
Regulatory rule	A binding rule applying within a regulator’s remit	Financial promotion rules for relevant regulated firms
Regulator guidance	An authority’s explanation of how rules or law may apply	CMA or ICO guidance
Industry self-regulation	A code administered by an industry body	The CAP Code for UK non-broadcast advertising
Professional ethical code	A statement of expected professional conduct	AMA or ICC ethics provisions
Organisation policy	A company’s own approved standard	An internal prohibition on targeting specified high-risk audiences
Good practice beyond compliance	A voluntary safeguard adopted because it improves fairness or reduces harm	Independent comprehension testing where no rule requires it

The ICC’s international marketing code is explicit that legality and ethical acceptability are not the same thing: a communication can be lawful and still be unacceptable (3). That code is industry self-regulation rather than legislation, which is exactly the sort of distinction this table exists to preserve.

The practical implication runs in both directions. Teams should not label every recommendation a legal requirement in order to win an argument. Equally, meeting the minimum legal threshold should not end the ethical review.

The interests marketing decisions affect

A marketing decision can affect more people than the intended buyer. Depending on the activity, the relevant interests may include:

• customers who receive the message;
• people deliberately excluded from an offer;
• children, or adults in vulnerable circumstances;
• people whose data informs targeting or measurement;
• customers who later need to cancel, complain or get support;
• employees and agencies asked to create or approve the campaign;
• communities represented in creative work, or absent from it;
• suppliers whose labour or environmental performance supports a claim;
• regulators, publishers and platforms;
• people affected by environmental or social externalities.

Stakeholder analysis does not mean every interest carries equal weight. It means material interests should be identified before a decision is described as responsible.

For each significant decision, ask:

1. Who receives the benefit?
2. Who carries the financial, informational or emotional risk?
3. Who has less information or less bargaining power?
4. Who is absent from the approval meeting but affected by the outcome?
5. Can the affected person avoid, reverse or challenge the decision?

The 4Ps ethics framework applies these principles to product, pricing, distribution and promotion decisions, which is usually where the affected interests above become concrete.

International guidance on consumer protection in e-commerce links fair marketing to consumer interests, good faith, non-deception, understandable conditions, and particular attention to children and to vulnerable or disadvantaged consumers (4). That is soft law addressed to governments rather than a directly binding obligation on a marketing team, and it should be cited as such.

Honesty and evidence

Honesty requires more than avoiding statements that are literally false. A communication can mislead through implication, selective presentation, imagery, comparison, omission, or an overall impression the detailed wording does not support.

Before making an objective claim, an organisation should be able to show:

• precisely what the claim means;
• whether it is absolute, comparative, predictive or qualified;
• what evidence supports it;
• whether that evidence covers the advertised product, audience and period;
• whether contradictory evidence was considered;
• when the evidence must be reviewed or retired.

In UK non-broadcast advertising, the CAP Code requires marketers to hold documentary evidence before publication for objective claims that consumers are likely to regard as capable of substantiation (5). That is a self-regulatory requirement administered through the ASA system. Separately, UK consumer-protection law prohibits misleading actions and misleading omissions in business-to-consumer commercial practices, under provisions applying to practices occurring from 6 April 2025 (6)(7).

An ethical review should go further than confirming that some evidence exists. It should ask whether the evidence is direct enough, current enough and representative enough to support the impression the audience will actually take away.

Transparency and understandable communication

Transparency means making material information available at a time, in a place and with a prominence that allows it to influence the decision.

It is not achieved by putting every condition into a long document. Nor is it achieved by technically disclosing a limitation somewhere users are unlikely to see or understand it.

A transparency test asks:

• What would a reasonable member of this audience need to know?
• Is that information visible before commitment?
• Is it written in language the intended audience can understand?
• Does the headline remain accurate when read without the small print?
• Are important disadvantages presented alongside the benefits?
• Does the complete journey preserve the same understanding?

Under the current UK regime, a commercial practice may be unfair where it misleads through action, through omission, or through the unclear, untimely or obscure presentation of material information (6). The CMA’s guidance explains those provisions. It is not itself the legislation, and the distinction is worth keeping straight when quoting it internally.

Ethically, teams should also consider information that might not meet a strict legal test of materiality but would predictably change how a significant group of customers evaluates the offer.

Fairness and equal treatment

Fairness asks whether comparable people are treated consistently, whether differences are justified, and whether the process places unreasonable burdens on particular groups.

It does not always require identical treatment. Different treatment may be justified where it responds to different needs, prevents harm, or provides an accessible route to the same outcome. The organisation should still be able to explain the basis for the difference.

Fairness reviews should examine:

• eligibility and exclusion rules;
• differences in price, offer or service by segment;
• proxy variables that may reproduce unjustified disparities;
• how representative the testing data is;
• whether optimisation favours easy-to-convert customers while disadvantaging others;
• whether complaints or failures cluster within particular groups;
• whether a remedy is equally accessible to everyone affected.

Where personal data is involved, the UK GDPR principles include lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability (8). Two cautions on citing that. The ICO’s principles guidance was updated in March 2026 but carries a notice that it is under review following the Data (Use and Access) Act 2025, as do a number of related ICO pages. And the Act itself amended the regime substantially, with most marketing-relevant provisions commenced in February 2026 (9). Anyone building a policy on data fairness should check the current position rather than relying on a summary written before that point.

For a fuller treatment of data fairness, see ethical use of consumer data in marketing.

Autonomy and freedom of choice

Autonomy means allowing customers to decide without deception, coercion or unreasonable obstruction.

Marketing always seeks to influence. Ethical influence differs from manipulation because it preserves the customer’s ability to understand the choice, compare realistic alternatives, decline, and reverse the decision where that is appropriate.

Warning signs include:

• preselected options that are not clearly disclosed;
• designs that make refusal significantly harder than acceptance;
• pressure unrelated to genuine availability;
• repeated interruption after a person has declined;
• material conditions withheld until late in the journey;
• avoidable friction in cancellation or withdrawal;
• appeals to fear, shame, confusion or social pressure;
• designs that produce accidental rather than deliberate consent.

An autonomy review should evaluate the whole decision architecture, not only the words in the advertisement.

Proportionality and data use

Proportionality asks whether the scale and intrusiveness of an intervention are justified by its purpose and by the likely value to the customer.

A capability is not appropriate merely because the organisation has it. A campaign can be technically possible and still be disproportionate, because it uses more data, more precision, more pressure or more experimentation than the customer benefit warrants.

Ask:

• Is the purpose specific enough to review?
• Could it be achieved with less data or less intrusive targeting?
• Is the expected customer benefit substantial, or speculative?
• Does the activity introduce new sensitivity, inference or exclusion risks?
• Would the organisation be comfortable explaining the approach to the affected customers directly?
• Is the retention period proportionate?
• Can the customer use the service without accepting unnecessary processing?

Data minimisation requires personal data to be adequate, relevant and limited to what is necessary for the stated purpose (10). That is a legal principle. The broader instruction to choose the least intrusive effective method is ethical good practice, and the two should not be presented as though they carried the same authority.

Implementation detail belongs in the guides to GDPR and CCPA implementation, privacy-safe personalisation and data security in marketing.

Avoiding foreseeable customer harm

Harm should not be limited to physical injury or direct financial loss. Depending on the campaign, foreseeable harm may include:

• unaffordable or unsuitable purchases;
• loss of privacy or control;
• discrimination or exclusion;
• emotional distress;
• reputational damage;
• time lost resolving avoidable problems;
• inability to access essential information;
• exposure to inappropriate content;
• dependence encouraged through manipulative design;
• environmental or community impacts concealed by a marketing claim.

The ethical task is not to prove that no harm can occur. It is to identify reasonably foreseeable harm, estimate its seriousness and likelihood, consider who is most exposed, and decide whether the risk should be reduced, monitored or avoided altogether.

Professional ethics statements include a norm against causing harm (1). In UK regulated financial services, guidance on vulnerable customers asks firms to understand potential harm, design services to avoid harmful impacts, and monitor customer outcomes (11). That guidance is sector-specific. It is a useful model of what outcome monitoring looks like in practice, and it should not be presented as a rule binding on every marketer.

Vulnerability and power imbalances

A person may be more susceptible to harm because of health, disability, financial circumstances, life events, limited digital confidence, age, language, urgency, or reduced capacity to assess complex information.

Vulnerability is not always visible, not always permanent, and not confined to a predefined segment. Someone may be vulnerable in relation to one decision and not another.

Teams should ask:

• Does the campaign reach people who may struggle to understand the offer?
• Does it exploit a known pressure, fear or dependency?
• Could the timing or targeting reach someone during a sensitive event?
• Is a complex, high-risk or expensive decision being presented as effortless?
• Can customers get human support, or an alternative format?
• Are exclusion rules protective, or do they unfairly deny access?
• Does the monitoring data show worse outcomes for a particular group?

Within its own remit, the FCA defines a vulnerable customer as someone especially susceptible to harm because of personal circumstances, particularly where a firm does not act with appropriate care (11). Outside financial services this remains a useful risk concept rather than an applicable rule, and organisations should identify the laws, sector rules and customer needs that actually apply to them.

Environmental and social responsibility

Environmental and social responsibility becomes a marketing-ethics question the moment an organisation makes claims about impact, sourcing, labour, inclusion, community benefit or progress.

A responsible claim should be:

• specific about what is being measured;
• supported by current evidence;
• clear about the product, geography and period covered;
• transparent about material limitations;
• consistent with the impression the whole communication creates;
• reviewed when the underlying conditions change;
• careful not to present ordinary legal compliance as a distinctive benefit.

The CAP Code requires the basis of environmental claims to be clear, expects a high level of substantiation for absolute claims, and warns against misleading people by focusing on only part of a product’s life cycle (12). Note that rules 11.8 and 11.9 were shown as deleted in October 2025, so anyone working from an older internal copy of that section should check it. Current CMA guidance addresses responsibilities for green claims across supply chains (13). CAP is self-regulation; the CMA material explains consumer-law expectations.

Social claims deserve the same discipline. Words such as ethical, inclusive, responsible or fair should not stand alone where the organisation cannot define the standard, the scope and the supporting evidence.

Conflicts between customer and commercial interests

Ethical problems usually arise where an option benefits the organisation while increasing risk, reducing understanding or weakening choice for the customer.

Examples include:

• hiding a condition because prominence would reduce conversion;
• targeting people who respond strongly but experience worse outcomes;
• retaining unnecessary data because it may create future value;
• designing cancellation to improve retention through friction;
• making a broad environmental claim because the precise version is less persuasive;
• letting an algorithm optimise for revenue with no constraint on customer harm.

The existence of a commercial benefit does not make a decision unethical. The question is whether the benefit depends on deception, exploitation, avoidable harm, or an unfair transfer of risk to the customer.

Where a material conflict exists, teams should document it as a conflict, rather than disguising it as a routine creative or optimisation choice.

Ethical trade-offs

Principles can point in different directions. More personalisation may improve relevance while increasing privacy risk. Protective exclusions may reduce harm while restricting access. More disclosure may improve completeness while making the communication harder to understand.

A sound trade-off process should:

1. define the legitimate objective;
2. identify the affected interests and the applicable obligations;
3. describe the conflict without assuming the commercial objective must win;
4. compare less harmful alternatives;
5. assess severity, likelihood, reversibility and distribution of harm;
6. introduce safeguards;
7. identify who has authority to accept the residual risk;
8. record the reasoning and a review date.

A balanced decision is not automatically an ethical one. Some practices should be rejected rather than weighed against revenue, including knowingly unsupported claims and fabricated scarcity.

Accountability and decision ownership

Ethical responsibility becomes ineffective when everyone contributes and nobody owns the decision.

A governance model should identify:

• the marketing owner responsible for the overall communication;
• the evidence owner responsible for claims and data;
• product and customer-experience owners responsible for the complete journey;
• legal or compliance reviewers responsible for applicable obligations;
• data-protection or security specialists where relevant;
• an ethics or senior risk owner for unresolved conflicts;
• the person authorised to pause or withdraw activity.

Approval should record what was reviewed, which evidence was relied on, and which limitations or conditions were accepted. It should not be a note saying that legal signed it off.

Ownership also has to survive disagreement, and disagreement is where most governance models quietly fail. I spent three seasons refereeing football, and the habit that transferred most directly to commercial work was knowing when to stop the game. In one kick-off meeting a colleague of mine and the client’s business owner started arguing over a misunderstanding, and it was escalating fast. I let it run for a moment, then stopped it, described how the exchange looked from outside the room, and explained why that argument could not be settled in a kick-off. I did not say my colleague had made a mistake, because publicly removing his authority would have cost the client more than it gained. I moved straight to what we could do about the underlying problem. That client stayed with us for two years.

The transferable part is not the diplomacy. It is that somebody in the room has to be responsible for stopping the discussion and naming what is actually being decided. In ethical review, that person needs to exist before the argument starts, and they need enough standing that stopping the game is not itself a career decision.

Ethics governance

Organisation-wide governance connects principles to everyday decisions.

Core elements include:

• a concise ethics policy with a defined status;
• worked examples of acceptable and unacceptable conduct;
• role-specific training;
• an inventory of higher-risk products, audiences and techniques;
• early review rather than last-minute approval;
• escalation routes insulated from delivery pressure;
• decision records;
• monitoring and complaint intelligence;
• periodic independent challenge;
• consequences for deliberate non-compliance;
• review after material changes in law, technology, evidence or customer outcomes.

Culture matters, because formal controls are easily undermined by incentives. Where teams are rewarded only for conversion, revenue or speed, customer understanding and harm become obstacles to route around. Performance systems should therefore carry relevant quality, fairness and customer-outcome measures.

There is a specific failure I would warn about, because I created it myself. When I moved from operational account management up to running a region, I finally understood why forecasting, CRM hygiene and knowledge sharing mattered, none of which had been visible to me lower down. What I gained in perspective I lost in something else. Seniority brings a constant pressure to optimise effort, and effort optimisation makes you deprioritise process failures that look small from where you sit. For the people living with those failures every day, they are not small, and they are not deferrable. Ethics governance dies in exactly that gap: a broken review step, an approval queue nobody can clear, a form that cannot record a dissenting view. None of it will ever look urgent from the top of the organisation, and all of it determines whether the framework works at all.

AI-specific governance is outside this article’s scope. Campaigns involving automated decisions, generative content, inferred attributes or model-based exclusion should also follow the guide to the ethics of AI in marketing.

How to document an ethical decision

An ethical decision record does not need to be long, but it should be usable by somebody who was not at the meeting.

Record:

• the decision or activity;
• its purpose and intended audience;
• the groups potentially affected;
• applicable legal, regulatory and self-regulatory requirements;
• the ethical principles engaged;
• the evidence reviewed;
• foreseeable harms and benefits;
• the alternatives considered;
• safeguards and residual risk;
• dissenting views or unresolved uncertainty;
• accountable approvers;
• monitoring indicators;
• pause or stop conditions;
• review and expiry dates.

Documentation should capture the reasoning, not only the outcome. Approved is not enough when the organisation later needs to understand why a risk was accepted.

Anyone who has sold to large organisations already knows the value of this, from the other side of the table. What kills enterprise deals at legal, procurement or security review is rarely a disagreement about substance. It is any point left even slightly ambiguous. Large organisations can smell an unanswered question, and an unanswered question feels to them like something that will come back later as their problem. Vendors consistently misread this as bureaucracy, usually because their own company has none and they have no way to empathise with it. The same instinct is worth borrowing internally. If a decision record leaves a gap, somebody will eventually have to fill it, and they will fill it under pressure, without the context you had.

How to measure ethical outcomes

Ethical performance cannot be reduced to brand sentiment or sales. Commercial performance can be measured alongside ethical outcomes. It does not demonstrate that a decision was fair or responsible.

A balanced measurement set may include:

Process measures

• proportion of higher-risk campaigns reviewed before production;
• evidence records completed;
• unresolved issues escalated;
• staff training and competency;
• time allowed for independent review.

Customer-understanding measures

• comprehension of material conditions;
• error rates;
• requests for clarification;
• gaps between intended and actual customer interpretation.

Fairness and autonomy measures

• outcomes across relevant segments;
• opt-out and cancellation completion;
• time and steps required to decline;
• accessibility failures;
• differences between the acceptance and refusal journeys.

Harm and remedy measures

• complaints and complaint themes;
• refunds, reversals or remediation;
• incidents involving vulnerable customers;
• privacy or targeting objections;
• claims withdrawn or corrected.

Accountability measures

• actions completed by owners;
• time taken to pause or correct activity;
• recurrence of previously identified failures;
• audit findings and overdue reviews.

Metrics should be interpreted rather than counted. A low complaint rate may reflect an inaccessible complaints process rather than an absence of harm.

The deeper problem is reading any single number on its own. In ten years of client data reviews I never found one uniquely misleading statistic, because the misleading thing was always the isolation rather than the metric. A conversion-rate uplift looks like an unambiguous success until you look at average order value underneath it and find the revenue effect was flat or negative. The same trap operates on ethical measures. Falling complaints alongside rising cancellations, or improving comprehension scores alongside a widening gap between segments, tell a story that neither number tells alone. Build the measurement set so that no single figure can be reported without its counterweight.

Ethical-marketing framework

The following framework suits policy development and higher-risk decisions.

Step 1: Define the decision. State what the organisation proposes to do, for whom, and for what purpose. Avoid descriptions such as improve engagement, which cannot be reviewed.

Step 2: Classify the applicable standards. Identify legal requirements, regulator rules and guidance, industry self-regulation, internal policy and voluntary good practice separately.

Step 3: Identify affected interests. Consider customers, excluded groups, vulnerable audiences, data subjects, employees, suppliers and communities where relevant.

Step 4: Test the principles. Assess honesty, transparency, fairness, autonomy, proportionality, harm, and environmental or social claims.

Step 5: Compare alternatives. Ask whether the objective can be achieved with clearer communication, less data, less pressure or fewer harmful effects.

Step 6: Assign responsibility. Name the owner of the evidence, the customer journey, the risk, the approval and the monitoring.

Step 7: Record, monitor and revisit. Document the decision, define indicators, and set the conditions that trigger review, correction or withdrawal.

For campaign-level execution, apply the practical ethical rules for digital marketing.

Practical ethics decision table

Question	Evidence required	Warning sign	Responsible owner
Is the claim true and substantiated?	Primary evidence	Ambiguous or selectively presented evidence	Legal or compliance
Can the customer understand the offer?	Tested copy and conditions	Material conditions hidden	Marketing owner
Is the decision fair?	Segment and outcome review	Unexplained group disparity	Product and analytics
Does it preserve meaningful choice?	Opt-out and cancellation tests	Friction or coercion	Product and customer experience
Could it create harm?	Risk assessment and complaints	Vulnerability or foreseeable loss	Ethics owner

Teams auditing ethics across Product, Price, Place and Promotion can also use the 4Ps of ethics in marketing.

Frequently Asked Questions

Conclusion

Ethical marketing is a method for making and defending responsible commercial decisions. It requires more than compliant copy or a public commitment to values.

Organisations need clear principles, evidence, meaningful customer choice, proportionate methods, explicit ownership, and the ability to pause activity when outcomes do not match expectations. They also need to distinguish binding obligations from self-regulation, regulator guidance, internal policy and voluntary safeguards, rather than blurring all five into the word compliance.

The central test is not whether a campaign sounds ethical. It is whether the organisation can explain whom the decision affects, what evidence supports it, which risks were considered, why the chosen approach is fair, and who will act if harm appears.

References

1. American Marketing Association, AMA Statement of Ethics, professional ethics statement, no publication or update date displayed. Professional code, not legislation. https://www.ama.org/codes-of-conduct/
2. Gene R. Laczniak and Patrick E. Murphy, Stakeholder Theory and Marketing: Moving from a Firm-Centric to a Societal Perspective, Journal of Public Policy and Marketing, peer-reviewed article, first published online 1 September 2012, DOI 10.1509/jppm.10.106. Academic research, not law. https://journals.sagepub.com/doi/10.1509/jppm.10.106
3. International Chamber of Commerce, ICC Advertising and Marketing Communications Code, 11th edition, international industry self-regulatory code, September 2024, ICC Publication No. 450/1081-11E. Self-regulation, not legislation. https://iccwbo.org/wp-content/uploads/sites/3/2024/09/ICC_2024_MarketingCode_2024.pdf
4. OECD Council, Recommendation of the Council on Consumer Protection in E-Commerce, Council recommendation, adopted 24 March 2016, refs. OECD-LEGAL-0422 and C(2016)13. International soft law; binding force depends on implementation by adhering governments. https://www.oecd.org/content/dam/oecd/en/publications/reports/2016/05/oecd-recommendation-of-the-council-on-consumer-protection-in-e-commerce_g1g66e4e/9789264255258-en.pdf
5. Committee of Advertising Practice, 03 Misleading advertising, CAP Code section, no publication or update date displayed. Self-regulatory code applied by the ASA. https://www.asa.org.uk/type/non_broadcast/code_section/03.html
6. Competition and Markets Authority, Unfair commercial practices, statutory guidance, ref. CMA207, published 4 April 2025, updated 18 November 2025. https://www.gov.uk/government/publications/unfair-commercial-practices-cma207/unfair-commercial-practices
7. Secretary of State, The Digital Markets, Competition and Consumers Act 2024 (Commencement No. 2) Regulations 2025, statutory instrument, SI 2025/272, made 4 March 2025. https://www.legislation.gov.uk/uksi/2025/272/made
8. Information Commissioner’s Office, A guide to the data protection principles, regulatory guidance, updated 23 March 2026. The page states that the guidance is under review following the Data (Use and Access) Act 2025 and may change. https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-protection-principles/a-guide-to-the-data-protection-principles/
9. Information Commissioner’s Office, The Data Use and Access Act 2025 (DUAA): what does it mean for organisations?, regulatory guidance, published 19 June 2025, materially updated 19 June 2026. https://ico.org.uk/about-the-ico/what-we-do/legislation-we-cover/data-use-and-access-act-2025/the-data-use-and-access-act-2025-what-does-it-mean-for-organisations/
10. Information Commissioner’s Office, Principle (c): Data minimisation, regulatory guidance, no page-specific update date displayed. Under review following the Data (Use and Access) Act 2025. https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-protection-principles/a-guide-to-the-data-protection-principles/data-minimisation/
11. Financial Conduct Authority, Guidance for firms on the fair treatment of vulnerable customers, finalised guidance, ref. FG21/1, published 23 February 2021, updated 22 July 2026. Applies within the FCA’s regulated remit only. https://www.fca.org.uk/publications/finalised-guidance/guidance-firms-fair-treatment-vulnerable-customers
12. Committee of Advertising Practice, 11 Environmental claims, CAP Code section, no general publication date displayed; rules 11.8 and 11.9 shown as deleted on 24 October 2025. Self-regulatory code applied by the ASA. https://www.asa.org.uk/type/non_broadcast/code_section/11.html
13. Competition and Markets Authority, Making green claims: getting it right, across the supply chain, regulator guidance, published 22 January 2026. https://www.gov.uk/government/publications/making-green-claims-getting-it-right-across-the-supply-chain

Position stated as at 28 July 2026. Regulatory guidance changes, and several of the sources above are marked by their publishers as under review. Check the linked sources before relying on any statement of the current legal position.