Rules and ethics
Which UK rules apply to a branding agency, and which authority sets each one
Branding agencies in England face distinct UK and GB legal, regulatory and standards layers. Map each duty to the real work before any release.
For branding agencies, UK regulation is split across legislation, codes, guidance, standards and editorial controls. The duties depend on the work: creating assets, using names, making commercial claims, handling personal information, buying media, supplying a service or working for a regulated client.
This overview was checked on 5 September 2026. It is general information, not professional advice or a finding that a project complies.
What to take away
- There is no single branding-agency licence in the UK; rules follow the work, so identify the authority before applying each rule.
- A company-name registration is not trade-mark clearance and search results settle nothing.
- The CAP Code applies to non-broadcast advertising, but the marketer holds primary responsibility under section 1.
- No favourable result in one column can override a failure in another.
Identify the authority before applying the rule
Use five labels in the project register:
Identify the authority
- legislation, with territorial extent and amendments checked;
- a statutory or self-regulatory code, within its stated remit;
- regulator or government guidance, which explains but does not grant clearance;
- a technical standard, which supplies test criteria rather than a legal conclusion;
- an editorial control chosen by the organisation.
Identify the authority
| Task | Authority | Instrument | Extent |
|---|---|---|---|
| Asset creation and copyright | IPO | Copyright, Designs and Patents Act 1988 | UK-wide |
| Naming and trade marks | IPO | Trade Marks Act 1994 | UK-wide |
| Advertising claims and media | CAP | CAP Code | UK-wide |
| Consumer claims | CMA | Digital Markets, Competition and Consumers Act 2024 and guidance | UK-wide |
| Personal data | ICO | UK GDPR, Data Protection Act 2018, PECR, Data (Use and Access) Act 2025 | UK-wide |
| Accessibility and discrimination | EHRC | Equality Act 2010 | Great Britain |
| Cyber security | NCSC | NCSC guidance | UK-wide |
| Regulated clients | Sector regulator plus CMA | sector rules and DMCCA 2024 | Varies |
Territorial extent: the Copyright, Designs and Patents Act 1988, Trade Marks Act 1994, CAP Code, DMCCA 2024 consumer provisions, UK GDPR, DPA 2018, PECR, DUAA 2025 and NCSC guidance are UK-wide. The Equality Act 2010 is Great Britain only; Northern Ireland has separate equality law. An England address does not make these rules England-only.
The Copyright, Designs and Patents Act 1988, section 11 is primary UK legislation on first ownership of copyright, subject to its provisions; section 90 covers written assignments. A commissioned logo's copyright does not automatically pass to a client because it paid the invoice.
Qualified IP lawyers should examine authorship, employment, prior assets and licences. They should check moral rights, assignment wording, work's territory.
Section 90 of the Act provides the formal rule for copyright assignments. Its text does not establish that a particular party owns the rights available to assign.
Trade marks need a different analysis. The IPO's official search route can reveal UK applications and registrations. Search results do not settle similarity, class coverage, unregistered rights or infringement. A company-name registration is not trade-mark clearance.
Separate identity from advertising
A colour palette or house style is not automatically an advert. Once creative work communicates a commercial claim, the message, context and audience matter. The CAP Code is the current self-regulatory rule book for non-broadcast advertising within its scope. CAP says advertisers, agencies and media must follow it, while the marketer has primary responsibility under section 1.
The CMA's unfair commercial practices guidance explains the UK consumer provisions of the Digital Markets, Competition and Consumers Act 2024. It is regulator guidance, not the Act itself and not approval of a campaign. Regulated products may add sector-specific rules, so the client and qualified advertising counsel must identify those before copy review.
Map information use by purpose
Research recruitment, project delivery, web analytics and direct marketing are separate processing purposes. The ICO's controller and processor guidance says status follows actual decisions and responsibilities. A contract label cannot decide it.
The ICO reported on 19 June 2026 that all data-protection provisions of the Data (Use and Access) Act 2025 were in force. The Act amends rather than replaces the UK GDPR, Data Protection Act 2018 and PECR in its DUAA update. Several detailed ICO pages remain marked under review. Record the page status and recheck it before publication.
Treat access and security as their own gates
The Equality Act 2010 is primary legislation with Great Britain scope, subject to its specific provisions and exceptions.
WCAG 2.2 is a global W3C technical standard, not a declaration of legal conformity. Determine applicable equality and accessibility obligations, then test the actual content and journey.
NCSC's small organisations guidance offers UK security practices. It cannot certify an agency, supplier or transfer. The project owner should preserve evidence for access control, file exchange, backups, incidents and deletion.
Before any release, list the real parties, deliverables, audiences, channels, data flows and jurisdictions. For example, the IP lawyer approves the assignment wording, the advertising counsel approves the claim, the data protection officer approves the data flow, and the security lead approves the file transfer. No favourable result in one column can override a failure in another.
Before you act
- Authoritylabel each rule as legislation, code, guidance, standard or editorial control.
- Authoritycheck territorial extent and amendments for each item.
- Copyrightconfirm ownership and assignment wording with a qualified IP lawyer.
- Advertisingidentify sector-specific rules for regulated products before copy review.
- Datarecord each processing purpose, lawful basis and controller or processor role.
- Securitylist access control, file exchange, backup, incident and deletion evidence.
- Accessibilitytest content and journey against WCAG 2.2 and applicable equality duties.
Common questions
Which rules cover a branding agency's advertising work?
The CAP Code governs non-broadcast advertising, with the marketer primarily responsible under section 1. The CMA's guidance explains the DMCCA 2024 consumer provisions, and regulated products may bring in sector-specific rules.
The CMA's unfair commercial practices guidance explains the UK consumer provisions of the Digital Markets, Competition and Consumers Act 2024, and regulated products may add sector-specific rules.
Does WCAG 2.2 prove a project is legally compliant?
No. WCAG 2.2 is a global W3C technical standard, not a declaration of legal conformity. The Equality Act 2010 is primary legislation with Great Britain scope, subject to its provisions and exceptions. Determine applicable equality and accessibility obligations, then test the actual content and journey rather than treating the standard as clearance.
