Online cancellation for UK consumers in 2026: DMCCA 2024 and the CCRs 2013
Steven | TrustYourWebsite · 20 April 2026 · Last updated: April 2026
The EU withdrawal button requirement (Directive 2023/2673, Article 11a) does not apply to UK-only traders. The UK left the EU before this directive was adopted, and there is no UK equivalent. UK consumer cancellation rights for online contracts rest on two frameworks: the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 (CCRs 2013, SI 2013/3134), which provide the baseline 14-day cancellation right, and the Digital Markets, Competition and Consumers Act 2024 (DMCCA), which adds a separate subscription contracts regime.
CCRs 2013: the 14-day cancellation right
The CCRs 2013 transpose the pre-Brexit version of the Consumer Rights Directive into UK law. They provide a 14-day cancellation period for distance and off-premises consumer contracts.
The 14-day period starts on the day after receipt of goods (for sales contracts) or on the day after the contract is concluded (for service contracts). The consumer must inform the trader of the decision to cancel, and may use the model cancellation form at Schedule 3 of the CCRs, though any clear statement suffices.
The trader must refund all payments, including standard delivery costs, within 14 days of receiving the cancellation notice (or of receiving the returned goods, if later). The consumer bears the direct cost of returning goods only if the trader has informed them of this before the contract was made.
The CCRs contain the same 12-month extension as the EU directive. If the trader fails to provide the required cancellation information, the cancellation period extends to 14 days plus 12 months. This is the single biggest enforcement stick for non-compliant traders.
Exceptions mirror the EU list: bespoke goods, unsealed hygiene products, perishable goods, sealed media, date-specific services and goods that have been mixed inseparably with other items after delivery.
DMCCA 2024: the subscription contracts regime
The DMCCA 2024 received Royal Assent on 24 May 2024. It introduces a comprehensive subscription contracts regime in Part 4, Chapter 2, Sections 253-277 and Schedule 23. The provisions have a phased commencement.
Already in force (6 April 2025): drip-pricing restrictions and fake-reviews provisions.
Delayed to Autumn 2026: the subscription contracts regime, including straightforward cancellation, cooling-off periods and reminder notices.
The subscription regime requires traders to provide "straightforward cancellation" for subscription contracts. Where the consumer signed up online, cancellation must also be available online. This is functionally similar to the EU withdrawal button, though the legal framework is different.
Key features of the subscription regime include an initial cooling-off period (14 days from the start of the subscription), renewal cooling-off periods (14 days after each automatic renewal), and mandatory reminder notices before each renewal or significant change in terms.
Exclusions from the subscription regime include utilities, financial services, Ofcom-regulated services, package travel, residential accommodation and Gift Aid arrangements.
CMA enforcement powers
The DMCCA gives the Competition and Markets Authority (CMA) significantly enhanced enforcement powers. The CMA can now impose direct penalties of up to 10% of global turnover or GBP 300,000, whichever is greater. This is a substantial increase from the previous regime, where the CMA had to apply to court for enforcement orders.
The CMA can also accept undertakings, issue compliance notices and apply for enhanced consumer measures through the courts. The DMCCA enforcement powers apply to both the existing CCRs 2013 framework and the new subscription contracts regime.
UK traders selling to EU consumers
The EU withdrawal button requirement (Article 11a) can reach UK traders who sell to EU consumers. Under the Rome I Regulation (as retained in EU law) and the Brussels Ia Regulation, when a trader directs activities to consumers in an EU Member State, the consumer protection law of that Member State applies. A UK webshop with an EU-facing storefront, shipping to EU addresses, or advertising in EU markets may need to comply with Article 11a for those EU-directed sales.
This does not mean adding the button to the entire UK site. It means that the EU-facing sales flow, particularly the customer account and order overview pages visible to EU customers, should include the withdrawal function with the correct language-specific label.
What the scanner detects
TrustYourWebsite scans for cancellation information in your terms and conditions (14-day mention, start of period, return cost information) and the presence of a model cancellation form. The subscription-specific requirements (reminder notices, renewal cooling-off) require human review or ongoing monitoring.
Scanner findings are technical signals, not legal verdicts.
Practical checklist
| Requirement | Legal basis | Action |
|---|---|---|
| 14-day cancellation information in terms | CCRs 2013 reg. 13 | State period, start point, exceptions |
| Model cancellation form | CCRs 2013 Schedule 3 | Provide download or inline form |
| Refund within 14 days of cancellation | CCRs 2013 reg. 34 | Automate refund processing |
| Return cost policy stated | CCRs 2013 reg. 35 | Who pays return shipping? |
| Straightforward online cancellation | DMCCA s. 258 (Autumn 2026) | Add cancellation flow online |
| Reminder notices before renewal | DMCCA s. 262 (Autumn 2026) | Automate pre-renewal emails |
| Renewal cooling-off period | DMCCA s. 256 (Autumn 2026) | 14-day opt-out window |
| EU button for EU-directed sales | Dir. 2023/2673 Art. 11a | Add button to EU customer flows |
Two frameworks, one principle
The UK has two overlapping cancellation frameworks: the existing CCRs 2013 for all distance contracts and the upcoming DMCCA subscription regime. The principle is the same: consumers must be able to cancel as easily as they can sign up. The DMCCA codifies this principle with direct enforcement powers that make non-compliance a genuine business risk. The 10% turnover penalty ensures that large and small businesses alike have reason to take cancellation rights seriously.
This article is technical analysis, not legal advice. Consult a solicitor for advice on your specific situation.
Check your website now
Scan your website for E-Commerce issues and 30+ other checks.
Scan your site freeWebsite Guides
UK website privacy notice requirements after DUAA (2026)
The 14 mandatory elements of a UK GDPR privacy notice. DUAA 2025 changes, new complaint mechanism, recognised legitimate interests and ICO checklist for SMEs.
Company website trading disclosures in the UK (2026)
Mandatory website disclosures for UK companies. Companies Act 2006 s.82, E-Commerce Regulations 2002 and the s.83 contract enforcement stick.
Cookie banner dark patterns in the UK: ICO enforcement in 2026
The 12 cookie banner dark patterns per EDPB taxonomy. ICO top-100 letter campaign, PECR enforcement and what the scanner detects after clicking reject all.