As we move into March 2025, businesses must stay informed about key legal and regulatory developments that could impact their operations. From the government’s consultation on e-invoicing to new cybersecurity guidelines and the latest in AI regulation, this month brings a range of updates across commercial law. Here’s what you need to know to stay ahead.
Supply of Goods and Services
Electronic invoicing
The Government has launched a consultation on standardising electronic invoicing. Electronic invoicing (or “e-invoicing”) is the digital exchange of invoice information directly between a buyer’s and a supplier’s financial systems, meaning that invoices are automatically written into the buyer’s financial system without manual processing. It is noted that currently, the uptake of e-invoicing is low. Businesses are invited to submit their views either online or by email by 7th May 2025.
Independent Anti-Slavery Commissioner’s strategic plan
The Independent Anti-Slavery Commissioner has published its strategic plan for 2024 to 2026 which includes supporting the introduction of mandatory human rights supply chain due diligence legislation in the UK.
Data protection
The Information Commissioner’s Office’s direct marketing advice generator
The Information Commissioner’s Office has launched a direct marketing advice generator tool which is free to use. It provides advice about how to engage in direct marketing, in compliance with UK law, across a variety methods including email, SMS, direct mail and social media.
Artificial Intelligence
International AI Safety Report
The Department for Science, Innovation and Technology (DSIT) have published the first independent International AI Safety Report. The report provides a comprehensive, shared scientific understanding of advanced AI systems and their risks according to DSIT. The report also contains input from AI experts from 30 countries, including China and the USA, as well as the UN, EU and the Organisation for Economic Co-operation and Development.
International AI Declaration
In early February 2025 there was an AI Action summit in Paris. The UK refused to sign the international AI declaration at the summit. Those who signed the declaration affirmed priorities such as reinforcing international co-operation and ensuring that AI is open, inclusive, transparent, ethical, safe, secure and trustworthy, taking into account international frameworks. It is understood that the government’s concerns surrounding signing the declaration include the impact on national security.
Employee use of shadow AI
Reportedly, employees are increasingly using their own AI tools without the permission of their employer’s IT department. This is known as “shadow AI”. A survey has been undertaken which shows that this is becoming more and more common, with half of all knowledge workers using personal AI tools. Many employees cite the lack of AI tools provided by their employers, or the desire for more flexibility in their choice of AI tools as reasons for this trend.
Cybersecurity
Draft Cyber Governance Code of Practice
The government has responded to its call for views on a draft Cyber Governance Code of Practice, which will support directors to drive greater cyber resilience. Feedback was received on various issues, including:
- The design of the Code.
- How the government can drive uptake of its use and compliance with the Code.
- The merits and demand for an assurance process against the Code.
Voluntary Code of Practice for AI Cybersecurity
A voluntary code of practice for AI cybersecurity has been published by the government. The government has also published an implementation guide to accompany the code, in order to help organisations comply. The code of practice sets baseline security requirements for all AI technologies and suggests risk mitigation activities for various stakeholders across the AI supply chain.
If you need support navigating these changes or understanding how they may impact your business, our Corporate and Commercial team is here to help. Get in touch with us for expert advice tailored to your needs.