UK SEO tooling rules explained by tracing each one to its source

What to take away

Where a UK rule can actually be found

Buyers often ask for "the regulation" as though one document covers search marketing. It does not. A duty normally begins in statute, is interpreted by a regulator, and is then applied to content, code or reporting.

Start with the statute. The Communications Act 2003 on legislation.gov.uk regulates communications services across the UK, including online services, and it applies directly in England. Read section 3 for Ofcom's general duties, then the section that fits your service. Read the section that applies, not a paragraph describing it.

Then read the regulator's code. Codes change more often than Acts, so cite the version date every time. The CAP code, for example, moves through numbered editions.

Finally, check the technical standard. It defines what "accessible" or "compliant" means in practice. WCAG 2.1 success criteria are the working text for accessibility audits.

Three checks keep a citation honest. Confirm the page shows the current version. Check that the section number matches the wording you quoted. Make sure the duty applies to your organisation. Superseded text often sits close to the live text, so read the version heading before you quote it.

If you want the full map rather than the source list, SEO tools: UK rules and compliance guide for 2027 sets the sections out in order.

Tracing each UK SEO tooling rule to its source

If your tooling touches a communications service, the Communications Act 2003, section 3, sets Ofcom's general duties. Ofcom's codes then interpret those duties for the services it regulates.

For advertising claims, the CAP non-broadcast code is the operational text. It covers online ads and marketing communications, so a landing page, a paid search headline and a campaign email all fall inside its scope. Quote the rule number and the version date alongside the wording.

Rule 2.1 requires marketing communications to be obviously identifiable as such. Rule 3.1 prohibits misleading claims that are material. Rule 3.7 requires documentary evidence before publication. Rule 3.33 requires comparisons with a competitor to be fair and not misleading.

Accessibility runs on a separate track. The WCAG 2 overview from the W3C explains the success criteria that auditors work to, and it is written for practitioners rather than lawyers. If a tool generates client pages or accessibility reports, check it against criteria such as 1.1.1, 1.4.3, 2.4.4 and 3.3.2.

For public sector clients, the Public Sector Bodies (Websites and Mobile Applications) (No. 2) Accessibility Regulations 2018, SI 2018/952, regulation 4, applies. It requires public sector websites and mobile apps to meet WCAG 2.1 level AA.

Cookies and analytics tools meet the Privacy and Electronic Communications Regulations 2003, regulation 6. Consent is needed to store or access information on a user's device, unless the cookie is strictly necessary. UK GDPR Article 6 covers lawful processing, and Article 13 covers the information you must give.

Consumer law adds another trace. The Consumer Protection from Unfair Trading Regulations 2008, regulations 3 and 4, cover misleading actions and omissions. The Business Protection from Misleading Marketing Regulations 2008, regulation 4, covers comparative claims between businesses. The Digital Markets, Competition and Consumers Act 2024, Part 4, adds CMA-enforced rules on fake reviews and drip pricing from April 2025.

The test is simple. If the wording does not create a duty, the source is background rather than authority, however useful it is for orientation.

Neither source settles a live dispute on its own. Rules are applied to facts, and facts vary. Treat this as general guidance and take advice from a qualified adviser on your own case.

Decision table: source document and rule for each task

Keeping a source register that holds up

One row per source. Record the name, URL, exact section or rule and version date. Add the date you read it, the reviewer and the decision it supported. The version date matters most, because the CAP code and WCAG are reissued. An undated citation invites doubt.

Name one owner for the register. A date with nobody attached tends to go stale between reviews. The gap only shows up when someone challenges a claim.

Anything used for an advertising claim needs a second column set. SEO tools advertising rules: data and sources shows how to attach a claim to the evidence behind it, which keeps the register useful at renewal rather than decorative.

Review the register at each campaign review and at each software renewal. Twice a year is often enough. If a rule has changed, mark the old row as superseded rather than deleting it, so the trail stays intact.

Common questions

Do these rules apply across the United Kingdom?

The Communications Act 2003 and the CAP code apply UK-wide, covering England, Scotland, Wales and Northern Ireland. PECR and UK GDPR also apply UK-wide. Public sector accessibility duties under the Equality Act 2010 apply in England, Scotland and Wales, with separate Northern Ireland rules. Where a matter is devolved, check the relevant regulator before relying on this page.

What should I cite for an advertising claim?

The CAP non-broadcast code, with the rule number, such as 3.1 for misleading claims or 3.7 for substantiation, and the date of the version you read. If the claim is comparative, cite CAP rule 3.33 and attach your own evidence file. For business-to-business comparisons, cite the Business Protection from Misleading Marketing Regulations 2008, regulation 4.

How often should a source be rechecked?

At each campaign review and at each software renewal. Codes move faster than Acts, so a dated snapshot is the practical minimum.

Is a vendor's compliance page good enough as a source?

No. It describes a rule rather than creating one. Use it as a pointer, then read the statute, code or standard it refers to.