The consumer aspects of the Digital Markets, Competition and Consumers Act (“DMCCA”) came into force on the 6 April, overhauling the UK’s consumer protection enforcement regime and giving the Competition and Markets Authority (“CMA”) real teeth when enforcing breaches of consumer law. In light of this, a proactive regulatory compliance audit is not just prudent, we consider it essential for our clients in the travel sector.
The new powers enable the CMA to:
Decide for itself whether there has been a breach of consumer protection law;
Order redress for affected customers; and
Impose fines of between 7.5% to 30% of UK turnover, with a statutory cap of 10% of worldwide turnover (or £300,000).
These laws apply to a broad range of consumer protection law, including:
Package travel;
Unfair sales and marketing practices; and
Unfair consumer contracts.
The CMA has confirmed that it will target behaviour that is particularly harmful to consumers and represents clear infringements of the law to ensure that harmful conduct is stopped quickly. It has highlighted the following six areas as susceptible to early enforcement action:
Aggressive sales practices against vulnerable consumers;
Providing false information to consumers;
Fake reviews;
Drip-pricing;
Unfair contract terms; and
Cancellation charges.
The CMA has also highlighted other areas where the law is clear and there is a risk of enforcement action because of previous action or guidance published by the CMA, CAA, Trading Standards or the Advertising Standards Authority. This includes:
Countdown timers;
Discount claims;
Price comparison;
14-day refund obligations;
Refund guarantees;
Search result rankings;
Resort fees; and
Scarcity and popularity claims.
How we can help
We can help travel businesses conduct a consumer regulatory compliance audit covering the following areas:
1. Price transparency
Total price disclosure: ensure all mandatory fees (including taxes, booking fees and resort charges) are included in the headline price.
Optional extras: charges for add-ons (like luggage, transfers, meals, insurance) should be clearly optional, and not pre-selected.
Currency clarity: where prices are quoted in foreign currencies, are conversion rates and payment fees transparent?
Why it matters: hidden costs and misleading pricing are high on the CMA’s enforcement radar. Drip pricing is a specific target under the DMCCA.
2. Urgency and scarcity claims
“Only X rooms left” / “Booked 5 times in the last hour” / “Trending now” must only be used if they can be substantiated in real time.
Is the inventory claim genuine, accurate, and based on objective data?
Why it matters:these types of messages can be seen as misleading commercial practices if not based on real availability, and such aggressive sales practices are a target area for the CMA.
3. Discounts and reference pricing
Are discounted prices compared to a genuine previous price? The holidays must have been sold at the previous price for a meaningful period of time.
Avoid false time-limited offers. For example, claiming that there is “20% off today only!” when the deal repeats regularly.
Why it matters:the CMA and ASA often challenge misleading reference prices and fake discount offers, and this will continue to be a focus area under the DMCCA.
4. Online reviews and endorsements
Are customer reviews authentic?
Is there a system in place to detect and manage fake or incentivised reviews?
Are affiliate influencers or paid partnerships clearly disclosed as such?
Is there transparency about how reviews are collected, filtered or moderated? This could be in the form of a policy setting out the travel company’s approach to reviews.
Why it matters:the DMCCA makes fake reviews and hidden influencer marketing explicitly unlawful.
5. Search results and rankings
Is it clear when listings are ranked based on commission, sponsorship or payment terms, versus relevance or popularity?
Do consumers understand what factors influence placement or prominence in the search results?
Why it matters:misleading the consumer about ranking criteria can amount to a misleading commercial practice.
6. Digital design and dark patterns
Are booking processes fair and easy to understand?
Are opt-ins genuine and clear: is consent genuinely informed and freely given, or are users steered into choices (e.g. via default settings or confusing wording)?
Cancellation journeys: is it as easy to cancel a service (e.g. recurring travel insurance or subscriptions) as it is to sign up?
Cookie consents / user tracking: review alignment with both DMCCA and UK GDPR.
Why it matters:the CMA is cracking down on design choices that manipulate consumer behaviour.
7. Pre-contractual information and T&Cs
Are key features of the travel service (price, itinerary, cancellation rights, insolvency protection) clear, upfront and compliant with PTR pre-contract information requirements?
Are the T&Cs drafted in plain English, and do they avoid hidden or one-sided clauses?
Are the T&C’s compliant with the PTRs and ATOL regulations?
Are cancellation terms fair and justifiable?
Are cancellation terms compliant with consumer regulations, including the PTRs, Consumer Rights Act and CCR’s?
Why it matters:failure to provide essential information can invalidate your consumer contract terms or mislead consumers, and the CMA is targeting contract terms which are clearly imbalanced and unfair.
8. Alignment with ASA and CAP Code
Are all ads and promotions compliant with advertising standards?
Is there substantiation for claims like “best price guarantee”?
Does your flight-product advertising comply with the ATOL regulations?
Have recent ASA rulings (e.g. on environmental claims or misleading pricing) been reviewed and reflected?
Why it matters:ASA rulings feed into CMA investigations and misleading ads can become regulatory risks.
9. Record-keeping and internal governance
Audit focus:
Internal documentation: are compliance procedures documented? Are complaints tracked and reviewed?
Staff training: are marketing, sales and customer service staff trained on consumer law obligations?
Third-party oversight: how are suppliers or affiliates (e.g. DMCs, comparison sites, review sites) vetted or monitored?
Why it matters: the CMA will have power to fine businesses directly – compliance governance will be a mitigating factor.
Please contact the travel team at Fox Williams for more information on how we can help your travel business.
We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept All”, you consent to the use of ALL the cookies. However, you may visit "Cookie Settings" to provide a controlled consent. Read More
This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Cookie
Duration
Description
_ga
1 year 1 month 4 days
Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.
_ga_*
1 year 1 month 4 days
Google Analytics sets this cookie to store and count page views.
CONSENT
2 years
YouTube sets this cookie via embedded YouTube videos and registers anonymous statistical data.
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.
Cookie
Duration
Description
VISITOR_INFO1_LIVE
6 months
YouTube sets this cookie to measure bandwidth, determining whether the user gets the new or old player interface.
YSC
session
Youtube sets this cookie to track the views of embedded videos on Youtube pages.
yt-remote-connected-devices
never
YouTube sets this cookie to store the user's video preferences using embedded YouTube videos.
yt-remote-device-id
never
YouTube sets this cookie to store the user's video preferences using embedded YouTube videos.
Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
Cookie
Duration
Description
__cf_bm
1 hour
This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.
cookielawinfo-checkbox-advertisement
1 year
Set by the GDPR Cookie Consent plugin, this cookie records the user consent for the cookies in the "Advertisement" category.
cookielawinfo-checkbox-analytics
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional
11 months
The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-others
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
CookieLawInfoConsent
1 year
CookieYes sets this cookie to record the default button state of the corresponding category and the status of CCPA. It works only in coordination with the primary cookie.
viewed_cookie_policy
11 months
The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.