The Public Authorities (Fraud, Error and Recovery) Act 2025 (Commencement No. 3) Regulations 2026

The Public Authorities (Fraud, Error and Recovery) Act 2025 (Commencement No. 3) Regulations 2026 mark a significant step in the phased implementation of the Public Authorities (Fraud, Error and Recovery) Act 2025 (c. 28). These Regulations bring into force several key provisions of the Act, primarily concerning the recovery of overpayments and the enforcement mechanisms available to public authorities. For legal practitioners, this means a tangible expansion of powers for bodies such as the Public Sector Fraud Authority and the Department for Work and Pensions, impacting areas from direct deduction orders to civil penalties. Understanding the specific sections now in effect is crucial for advising clients, whether they are public bodies navigating new enforcement tools or individuals potentially subject to enhanced recovery measures.

The landscape of public finance integrity in the United Kingdom is undergoing a substantial transformation with the phased implementation of the Public Authorities (Fraud, Error and Recovery) Act 2025 (c. 28) (the "Act"). The latest development in this legislative rollout is the Public Authorities (Fraud, Error and Recovery) Act 2025 (Commencement No. 3) Regulations 2026 (S.I. 2026/601), which bring into force additional critical provisions of the Act. These Regulations are not merely procedural; they activate substantive powers designed to enhance the government's ability to combat fraud and error across the public sector and recover misappropriated or overpaid funds.

This article aims to provide legal professionals with a comprehensive overview of the Act's broader objectives, the specific provisions now in effect due to the Commencement No. 3 Regulations, and their practical implications. The Act represents a concerted effort to safeguard public money, estimated to be lost in billions annually due to fraud and error, by equipping public authorities with more robust investigatory and recovery tools. As such, understanding these newly commenced powers is essential for practitioners advising public bodies on compliance and enforcement, as well as for those representing individuals or financial institutions affected by these expanded governmental capabilities.

The Public Authorities (Fraud, Error and Recovery) Act 2025 received Royal Assent on 2 December 2025, following its introduction to Parliament in January 2025. Its enactment was driven by a recognition of the significant financial losses incurred by the public purse due to fraud and error, with estimates suggesting billions are lost each year across various public services, including the social security system. Prior to this Act, the framework for tackling fraud and error in the public sector was fragmented, relying on various pieces of legislation such as the Social Security Administration Act 1992 (c. 5) and the Welfare Reform Act 2012 (c. 5), which the new Act now amends and supplements.

The Act's overarching purpose is to provide new powers to the Public Sector Fraud Authority (PSFA), located within the Cabinet Office, to investigate public sector fraud outside of tax and social security, and to the Department for Work and Pensions (DWP) to address fraud and error within the social security system. The initial commencement regulations, the Public Authorities (Fraud, Error and Recovery) Act 2025 (Commencement No. 1) Regulations 2025 (S.I. 2025/1335), brought into force Section 98 (rights of audience for Secretary of State's officers) and scheduled the commencement of Sections 78, 79, and Schedule 3 (eligibility verification measures) for two months post-Royal Assent. The current Commencement No. 3 Regulations build upon this foundation, activating further critical provisions to bolster the government's recovery capabilities.

The Public Authorities (Fraud, Error and Recovery) Act 2025 (Commencement No. 3) Regulations 2026 (S.I. 2026/601) bring into force several key sections and schedules of the Act, primarily focusing on the recovery of funds and associated enforcement powers. Specifically, these Regulations commence sections 94, 95, 96, 97, 99, 100, and 104, along with Schedules 5 and 6 of the Act. These provisions are central to the Act's objective of enabling more effective recovery of money paid by public authorities as a result of fraud or error.

For instance, the commencement of Schedule 5, which deals with recovery from bank accounts, is particularly significant. This schedule underpins the DWP's power to issue 'direct deduction orders', allowing for the recovery of debts directly from individuals' bank accounts without requiring a prior court order. This represents a substantial shift from previous recovery methods and places new obligations on banks and other financial institutions to comply with such orders, with potential fines for non-compliance. Similarly, the activation of Schedule 6, concerning disqualification from driving, introduces a new enforcement mechanism for certain unpaid debts, mirroring powers seen in other areas of debt recovery.

Sections 94 to 97 and 99 to 100 likely pertain to the procedural aspects of these recovery powers, including the types of amounts recoverable, the process for issuing recovery notices, and the imposition of civil penalties for fraudulent activities or non-compliance. The Act introduces a framework for civil penalties that the Minister can impose, offering an alternative to criminal prosecution and aiming to deter fraud. While the Act includes safeguards, reporting mechanisms, and independent oversight to ensure the proportionate and effective use of these new powers, concerns have been raised regarding the potential for "Orwellian levels of mass surveillance" and impacts on data privacy, particularly concerning eligibility verification notices. The DWP and Cabinet Office are expected to issue Codes of Practice and guidance to clarify the practical application of these measures.

The territorial extent of these powers varies; while Part 1 of the Act (PSFA powers) applies to England and Wales only, Part 2 (DWP powers, including eligibility verification and direct deduction orders) extends to England, Wales, and Scotland. This jurisdictional distinction is important for practitioners to note when assessing the applicability of specific provisions. The new powers also necessitate enhanced due diligence and compliance processes for financial institutions, who will be at the forefront of implementing many of the data examination and direct deduction requirements.

The Public Authorities (Fraud, Error and Recovery) Act 2025 (Commencement No. 3) Regulations 2026 represent a critical juncture in the UK government's strategy to combat public sector fraud and error. By bringing into force key provisions related to direct deduction orders, civil penalties, and other recovery mechanisms, the Regulations significantly enhance the enforcement capabilities of the Public Sector Fraud Authority and the Department for Work and Pensions. This legislative development underscores a clear intent to move beyond traditional recovery methods, embracing more direct and data-driven approaches to safeguard public funds.

For legal practitioners, it is imperative to thoroughly understand the scope and implications of these newly commenced powers. Firms advising public authorities must ensure their clients are fully compliant with the new procedural requirements and prepared to exercise these enhanced powers responsibly and proportionately. Conversely, those representing individuals or financial institutions must be acutely aware of the increased scrutiny and new obligations, particularly concerning data sharing and direct deductions from accounts. Ongoing vigilance will be required as further guidance, codes of practice, and potentially case law emerge, shaping the practical application and interpretation of this transformative legislation.