CMA UK: What CEOs Must Know About Competition Enforcement
The Competition and Markets Authority has emerged as one of the UK's most assertive regulators, reshaping how executives approach mergers, acquisitions, and competitive conduct. With enforcement activity intensifying and merger thresholds under review, board-level understanding of CMA priorities is no longer optional—it's operational necessity.
As of mid-2026, the CMA's remit extends across merger control, antitrust investigations, and consumer protection. For CEOs navigating post-Brexit regulation, the differences between UK and EU competition law matter. The CMA operates independently of Brussels, applying distinct thresholds and enforcement philosophies that increasingly diverge from European precedent.
Recent CMA Enforcement Trends and High-Profile Cases
The CMA's case docket reveals tougher scrutiny of mega-mergers and vertical integration strategies. The authority blocked or required significant remedies in several transactions involving digital platforms, financial services, and healthcare sectors.
In 2024–2025, the CMA investigated major telecommunications consolidation, examining whether proposed deals would reduce consumer choice. The regulator's findings emphasised that market concentration in telecoms—already high in the UK—could worsen consumer outcomes and investment incentives.
The CMA has also intensified scrutiny of online marketplaces and advertising tech platforms. Following investigations into practices that restrict competition, the authority has issued provisional findings and Final Orders mandating behaviour changes. These cases signal that the CMA will not tolerate conduct that leverages market dominance to foreclose rivals, particularly in digital ecosystems where switching costs are low but network effects are powerful.
Consumer protection remains central to CMA enforcement. The regulator has pursued cases against major retailers and online sellers for misleading pricing, unfair contract terms, and subscription trap practices. In 2025, the CMA secured commitments from several large e-commerce platforms to improve transparency around automatic renewals—a trend likely to affect subscription-based business models across sectors.
For boards, the lesson is clear: the CMA no longer treats competition enforcement as a compliance checkbox. The authority views merger control and antitrust action as tools to shape market structure and consumer outcomes. This philosophy differs markedly from earlier, lighter-touch approaches.
Merger Control: Thresholds, Timelines, and Deal Scrutiny
Understanding CMA merger thresholds is essential for any transaction planning. The current turnover-based threshold is £112 million (adjusted annually for inflation). Deals below this threshold still trigger review if the acquirer will hold more than 25% of the target—the share-of-supply test.
However, the CMA is reviewing these thresholds. Proposals under consideration would lower turnover thresholds and introduce new criteria for digital markets, particularly targeting acquisitions by large tech companies that may not meet traditional financial tests but would concentrate market power. A deal involving a company with significant user data, network effects, or strategic market position could face heightened scrutiny even if monetary values fall below current thresholds.
The CMA's merger review process operates in two phases. Phase 1 (eight weeks) assesses whether a deal raises competition concerns. If concerns exist, Phase 2 (up to 20 weeks) investigates deeper. In practice, Phase 2 reviews often trigger remedies or withdrawal of deals.
Recent guidance from the CMA emphasises several factors that increase Phase 2 likelihood: (1) horizontal overlaps in oligopolistic markets; (2) vertical integration in digital supply chains; (3) removal of a significant competitor; (4) acquisitions of nascent competitors before they scale; and (5) transactions involving essential infrastructure or data assets.
Deal timelines matter commercially. Phase 1 clearance allows completion within 3–4 months of CMA notification. Phase 2 proceedings extend timelines to 6+ months, creating financing risks, management distraction, and deal uncertainty. Some transactions have been abandoned because remedies requested by the CMA—such as asset divestitures or licence restrictions—destroyed deal economics.
CEOs should build CMA review risk into transaction planning. Engaging the authority early, through pre-notification discussions, allows deal teams to understand likely concerns and structure remedies before formal submission. This is not free-pass negotiation; it is practical risk management.
Sector-Specific Regulatory Priorities
CMA enforcement intensity varies by sector. Digital markets remain top priority. Following investigations into major tech platforms, the CMA has moved toward ex-ante regulation (rules pre-emptively imposed to prevent harm) rather than reactive investigation. This shift signals that large tech companies must expect ongoing scrutiny and potential mandatory compliance orders.
Financial services face heightened attention. Consolidation in banking, insurance, and asset management is assessed rigorously. The CMA has challenged or required extensive remedies in deals that reduce retail banking choice or concentrate mortgage lending. Post-regulatory capital requirements and higher operational costs mean bank consolidation is tempting; CMA resistance means fewer deals will clear unencumbered.
Healthcare and pharmaceuticals are scrutinised for vertical and horizontal integration. Acquisitions by large hospital groups, private equity roll-ups of dental practices, and pharmaceutical M&A involving competing drug portfolios have drawn CMA investigation. The authority views healthcare competition as linked to patient outcomes and NHS efficiency.
Energy and utilities undergo rigorous review. As the UK transitions to renewable generation and decarbonised heating, consolidation among energy suppliers and network operators is restricted. The CMA is mindful that concentrated energy markets can drive price inflation and underinvestment—risks that matter during energy security transitions.
Retail and e-commerce have seen CMA action on both merger control and antitrust conduct. Large online platforms that also sell products—creating potential conflicts of interest—are expected to maintain separation between marketplace rules and their own commercial interests. The authority has issued orders requiring transparency and fair access.
Conduct and Antitrust Investigations
Beyond merger control, CMA conduct investigations address abuse of market dominance and anti-competitive agreements. Section 18 of the Competition Act 1998 mirrors EU Article 102, prohibiting abuse of dominance. This includes predatory pricing, excessive pricing, refusal to deal, and leveraging dominance across markets.
The CMA's approach to defining dominance and abuse has become more aggressive. The authority no longer requires near-monopoly market shares to initiate investigation. A company with 40–50% market share plus strategic advantages (data, network effects, switching costs) may face scrutiny if competitors can demonstrate abuse.
Digital platforms face particular exposure. The CMA has examined alleged abuse through ranking manipulation (preferencing the platform's own offerings over rivals), algorithmic discrimination (applying different terms to competing sellers), and data leveraging (using non-public market data to undercut competitors). These conduct investigations often take 18+ months and can result in substantial fines and mandatory remedies.
Vertical agreements—contracts between suppliers and buyers—are assessed for anti-competitive effect. Exclusivity clauses, resale price maintenance, and most-favoured-customer clauses face CMA scrutiny. The authority applies UK competition law post-Brexit differently from EU law in some respects, though both retain similar prohibitions on hard-core restraints.
Cartel investigations remain serious risk. The CMA pursues price-fixing, bid-rigging, and market allocation schemes with criminal prosecution available for individuals involved. Prison sentences have been imposed in UK cartel cases. Boards should ensure robust compliance policies, whistleblower protections, and antitrust training for all staff involved in pricing, sales, or procurement.
Post-Brexit Regulatory Divergence
UK competition law diverges from EU law in several material ways. The CMA retains flexibility in thresholds, investigative procedures, and remedies that the European Commission does not. This can mean faster decisions (positive) or less predictability based on EU precedent (negative).
The CMA has adopted more permissive approaches to efficiency claims than the EU. Merger remedies may be structured differently. Digital regulation under the CMA has developed separate from EU Digital Markets Act requirements, though outcomes often converge.
For multinational groups operating in both UK and EU markets, dual compliance is unavoidable. A merger may require both CMA and CJEU approval. An abuse-of-dominance investigation might proceed in parallel in both jurisdictions with different legal standards and potential outcomes. This complexity demands integrated legal strategy, not siloed compliance teams.
Scotland and Wales have devolved aspects of consumer protection but not competition law—CMA authority is UK-wide. However, regional economic development objectives sometimes intersect with merger control, particularly in infrastructure, energy, and manufacturing sectors where regional concentration may be tolerated to preserve local industrial base.
Preparing for CMA Review: Practical Board-Level Steps
For any transaction anticipated to require CMA review, boards should establish governance and timelines early. Assign a cross-functional deal team including legal, finance, and operational expertise. Ensure competition law counsel is involved from transaction conception, not brought in after announcement.
Conduct internal competition law audit before deal launch. Identify overlapping market positions, customer overlaps, and potential vertical integration concerns. Model CMA Phase 1 and Phase 2 scenarios. Estimate remedies that might be required—divestitures, behavioural commitments, or licence conditions—and test whether deal economics survive.
Consider early engagement with CMA through formal pre-notification discussions. These are confidential, allow exchange of views, and sometimes clarify whether a deal is likely to raise Phase 2 concerns. While not binding, they inform decision-making and allow deal teams to adjust strategy before formal notification.
Documentation discipline matters. CMA investigations include requests for internal emails, board papers, and strategic plans. Careless communications discussing market share targets, competitor responses, or customer allocation create evidence of anti-competitive intent. Train executive teams on communication standards during deal processes.
Monitor CMA consultation papers and guidance updates. The authority regularly publishes evolving standards on merger assessment, digital markets conduct, and enforcement priorities. Boards should designate responsibility for regulatory monitoring and quarterly review of CMA developments.
Forward-Looking Regulatory Outlook
The CMA's trajectory points toward stricter enforcement and lower thresholds. Government support for more assertive competition regulation—reflected in 2025 manifesto commitments—has translated into enhanced CMA resources and mandate expansion. The regulator's budget has increased, and staffing has grown, enabling more concurrent investigations.
Digital regulation will dominate. The CMA is moving toward ex-ante rules for designated large tech platforms, similar to EU Digital Markets Act approaches but adapted to UK framework. Companies likely to be designated should prepare compliance roadmaps now. Operational changes demanded by future CMA orders will take time to implement; early voluntary compliance positions companies favourably if designation occurs.
Merger thresholds will likely decline. Proposed changes to capture deals involving digital assets, data concentration, or strategic competitive advantage have strong political backing. Executives should assume that tomorrow's £80 million deal may require CMA review even if today's threshold is £112 million.
Cross-border deal complexity will increase. As UK and EU competition regimes diverge, transactions requiring parallel approvals will face higher negotiation costs and longer timelines. Private equity and strategic buyers should build longer approval windows into transaction models.
The CMA has signalled that consumer protection, environmental outcomes, and worker rights will increasingly influence competition enforcement. Mergers with sustainability benefits or worker protection commitments may receive more sympathetic review. Conversely, transactions perceived as extractive or solely profit-driven may face higher barriers.
For boards, the message is unambiguous: competition regulation is now a first-order business consideration, not a compliance afterthought. Understanding CMA priorities, building regulatory risk into transaction planning, and maintaining rigorous compliance standards is foundational to operational and strategic success in the UK market.
Resources for further guidance are available from the CMA directly, including the CMA's official website and published merger guidance. The regulator also publishes case summaries and decisions that provide insight into enforcement approach. Companies considering substantial transactions should review recent CMA case studies relevant to their sector. For detailed merger thresholds and assessment criteria, the CMA's merger control page provides comprehensive guidance and procedural information.
