The Enforcement Trade-Off: How the UK's New Digital Markets Act Imposes 10% Global Turnover Fines for E-Commerce Consumer Law Breaches

For years, online shoppers have navigated a digital minefield of hidden fees, manipulated star ratings, and fabricated testimonials. The burden of verifying whether a five-star review was genuine or whether a checkout price would suddenly inflate has rested almost entirely on the consumer, creating an ecosystem where deceptive design often outpaced regulatory oversight.

That era of "buyer beware" is abruptly ending in the United Kingdom. The Digital Markets, Competition and Consumers Act 2024 (DMCCA), whose consumer protection provisions took full effect in April 2025, has fundamentally rewritten the rules of e-commerce and digital trust.[5]

The most significant change is a structural one: the Competition and Markets Authority (CMA) no longer has to drag companies through a lengthy, resource-intensive court process to enforce consumer law. The regulator now wields direct administrative powers to issue infringement notices and mandate immediate changes to business practices.[3][5]

The financial stakes have also been radically escalated. The CMA can now impose fines of up to 10% of a company's global annual turnover for consumer law breaches, bringing consumer protection penalties in line with severe antitrust violations and forcing multinational corporations to treat digital transparency as a board-level risk.[2][5]

In April 2026, the CMA proved it was willing to use its new arsenal, issuing its first direct financial penalty under the DMCCA regime and signaling that the grace period for compliance was officially over.[2]

The target was the Automobile Association (AA), which was fined £4.2 million after an investigation revealed that its driving schools, AA and BSM, engaged in "drip pricing." Customers booking lessons were shown an initial headline price, only to have a mandatory £3 booking fee added at the final checkout stage.[2]

Beyond the fine, the CMA utilized its new powers to order direct consumer redress. The AA was forced to automatically refund more than £760,000 to approximately 80,000 affected learner drivers, without requiring the consumers to fill out forms or take any action to reclaim their money.

While the AA case targeted pricing transparency, the CMA is simultaneously waging a massive campaign against the fake review ecosystem, which influences billions of pounds in consumer spending annually and has long been a source of frustration for honest businesses.[4]

In late March 2026, the watchdog launched five formal investigations into major brands to scrutinize exactly how online reviews are obtained, moderated, and displayed to the public.[1][6]

The car-selling platform Autotrader and the review moderation company Feefo are under investigation for allegedly suppressing negative feedback. The CMA is examining whether genuine one-star reviews were excluded from publication and omitted from overall star rating calculations, denying buyers a complete picture.[1][4]

Food delivery giant Just Eat is facing scrutiny over concerns that its internal rating system may have artificially inflated the star ratings of certain restaurants and grocers, presenting a misleading picture of quality to users trying to choose their next meal.[1][6]

Another food brand, Pasta Evangelists, is being investigated for allegedly offering customers discounts on future orders in exchange for leaving five-star reviews on delivery apps, without disclosing the financial incentive to other shoppers.[1][6]

The funeral services operator Dignity is also under investigation to determine whether staff members were instructed to write positive reviews about the company's crematoria services, creating a fabricated image of customer satisfaction during a highly vulnerable purchasing moment.[1][4]

The DMCCA explicitly classifies these tactics—including posting fake reviews, hiding negative feedback, and presenting misleading aggregated ratings—as "banned practices." Crucially, the law imposes a positive obligation on platforms to take reasonable and proportionate steps to prevent fake reviews from being published in the first place.[4][5]

This means e-commerce giants can no longer claim ignorance or hide behind the defense that third-party sellers are solely responsible for the fraudulent content on their platforms. The legal liability now rests firmly with the publisher of the reviews.[4]

The extraterritorial reach of the DMCCA means these rules apply to any business selling goods or services to UK consumers, regardless of where the company is headquartered. A US or Asian e-commerce platform targeting British shoppers faces the same 10% global turnover risk as a domestic retailer.[5]

AI

What remains untested is how aggressively the CMA will pursue non-UK tech giants for third-party review fraud, and whether the threat of massive fines will force platforms to over-moderate, potentially removing legitimate reviews to avoid regulatory scrutiny.[3]

For now, the message to the e-commerce sector is unequivocal: the cost of deceptive digital design has shifted from the consumer to the corporation. The digital checkout is finally being forced into the light, leveling the playing field for honest businesses and restoring trust for shoppers.