The Tobacco and Vapes Bill, as amended in the Lords, stitches together a wide set of changes: it cements the generational prohibition on sales to people born on or after 1 January 2009, expands the regulatory perimeter to include filters and technological features of vaping devices, and creates a clearer enforcement architecture across the UK with new powers for local authorities, national authorities and courts.
Key operational changes include a Wales‑specific fixed‑penalty notice (FPN) regime with set amounts and an early‑payment discount, a carve‑out allowing certain vape vending machines in mental health inpatient areas, statutory safe‑harbours for internet service providers that merely transmit or temporarily cache user content, and an advertising defence for public‑health campaigns. The Act also requires a formal review four to seven years after passage.
At a Glance
What It Does
Establishes offences and enforcement powers across tobacco, vaping and related products; defines and brings 'filters' and technological features into scope; creates a Wales fixed‑penalty regime and clarifies which local or national bodies enforce particular provisions. It also creates ISP exceptions for conduit/caching/hosting and an advertising defence for public‑health campaigns.
Who It Affects
Retailers and licensees of tobacco, vaping products and filters; manufacturers and importers of vaping devices and technological features; local weights and measures authorities and district councils as enforcement bodies; online platforms and internet service providers; broadcasters and on‑demand programme services.
Why It Matters
This bill shifts regulatory risk from a narrow product focus to the wider vaping ecosystem (filters, software, device tech) and couples criminal offences with civil enforcement tools (FPNs, prohibition orders, forfeiture). Companies and regulators will need new compliance, monitoring and enforcement workflows — and online intermediaries get limited statutory protection when user content promotes prohibited products.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The Lords amendments broaden the scope of the Bill and tighten how enforcement will work in practice. The Bill keeps the generational sales prohibition (sale to people born on or after 1 January 2009) as a core offence and layers on definitions and offences that reach beyond cartridges and e‑liquids.
Notably, the Bill adds a formal definition of “filter” and makes explicit that filters — whether sold as standalone items or intended to be inserted into smoking devices — can be regulated and subject to the same prohibitions and offences as traditional tobacco and oral products.
Enforcement is reworked to be more flexible and UK‑wide. The Bill creates the concept of “relevant enforcement authorities” (local weights and measures authorities and, where appropriate, district councils specified as licensing authorities) and gives regulators a menu of powers to use under regulations: conferring functions, directing which authority should act in particular cases, taking over proceedings, ordering forfeiture, and temporarily prohibiting supply of suspected non‑compliant products for up to six months.
The Bill caps maximum imprisonment for new offences created under the Part at two years.For Wales the Bill inserts a specific fixed‑penalty regime: local weights and measures authorities in Wales may issue FPNs for a range of statutory offences, set the default amount at £200 for most offences (and level 4 on the standard scale for retail‑licensing offences), and allow a 50% discounted early payment within a 14‑day window; Welsh Ministers can adjust those amounts by affirmative regulations subject to limits. The Bill also provides for the use of FPN receipts by Welsh authorities for work connected to enforcement under this Act and related public‑health regulations.Online and communications law receives two practical changes.
First, the Bill creates limited exceptions for internet service providers: ISPs do not commit offences for conduit, caching or hosting activity provided they did not initiate, select recipients, or modify content, and they act promptly to remove content on notice or court order. Second, the Bill introduces a specific defence where a person charged with advertising offences can show they acted under arrangements made by a public authority for public‑health purposes — a narrow carve‑out intended to permit official campaigns.Other operational amendments include a narrow exception allowing vape vending machines in areas of mental health hospitals intended wholly or mainly for adult inpatients, product‑placement and on‑demand advertising changes that permit only generic/category advertising under public‑authority arrangements, and a statutory review requirement obliging the Secretary of State to assess economic and health impacts after a period of four to seven years and to consult devolved administrations.
The Five Things You Need to Know
The Bill extends regulation to 'filters' by giving a statutory definition covering standalone filters and those intended for insertion into smoking devices.
Local weights and measures authorities in Wales can issue fixed‑penalty notices: default £200 for most offences, level 4 (statutory maximum) for retail‑licensing offences, with 50% discount if paid within 14 days.
Regulations may let an appropriate national authority direct or take over enforcement from local authorities, and may allow enforcement authorities to prohibit supplying a product for up to six months where breach is suspected.
Internet service providers get an express defence for conduit, caching and hosting activity if they do not initiate or select recipients and they promptly remove material after notice or court order.
Regulations creating new offences under the Part may allow imprisonment or fines, but set a maximum custodial term of 2 years.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Vape vending machines in mental health inpatient areas
Amends the prohibition around vape vending machines to permit machines in mental health hospitals only where they are placed in areas intended wholly or mainly for adult inpatients. Practically, this creates a narrow exemption aimed at inpatient settings and limits placement to adult wards; compliance officers for hospitals and suppliers of vending machines must ensure machines are sited only in qualifying inpatient areas and that age‑restricted access controls are robust.
Fixed‑penalty notices and use of proceeds in Wales
Introduces a bespoke FPN regime for Wales administered by local weights and measures authorities. The schedule fixes amounts (£200 for most offences, level 4 for licensing offences), specifies a 28‑day notice period with a 50% early‑payment option within 14 days, and requires FPN receipts to be used for enforcement and related public‑health functions. Welsh Ministers may amend amounts/discounts by affirmative regulations but cannot exceed level 3 for certain fine changes, creating a devolved but circumscribed enforcement funding stream.
Enforcement architecture and powers
The amendments define 'relevant enforcement authority' across the UK and let regulations confer functions on local bodies or allow an 'appropriate national authority' to direct or assume enforcement. Regulations can create powers to prohibit supply of products for up to six months, provide for forfeiture (courts in England/Wales/Northern Ireland; sheriffs in Scotland), and include mechanisms for compensation and dispute resolution. This gives ministers flexibility to design enforcement but requires well‑drafted regulations to avoid jurisdictional confusion between local and national actors.
Filters and technological features brought into scope
The Bill inserts a uniform definition of 'filter' across UK jurisdictions and expressly permits regulations to extend product rules (including prohibitions and disclosure obligations) to filters. It also adds 'technological features' and software of vaping devices to the regulatory remit. Manufacturers, importers and retailers will need to consider whether filters or embedded software trigger labelling, marketing or product restrictions and whether previously unregulated accessories become reportable or seizure‑able under enforcement rules.
ISP exceptions for conduit, caching and hosting
Creates explicit safe‑harbours for internet service providers that only provide network access, transmit user‑supplied content, or perform automatic transient caching — provided they do not initiate transmissions, select recipients, or modify content, and they act promptly to remove content they know to be prohibited or when ordered. The provision mirrors classic intermediary liability shields but couples them with a prompt‑removal obligation tied to knowledge or judicial/administrative notice.
Advertising defence for public‑health campaigns
Adds a defence where a person charged with advertising offences can show they acted in accordance with arrangements made by a public authority, limited strictly to purposes of promoting or protecting public health. The clause includes evidential rules to ease the defence where sufficient evidence raises the issue and the prosecution cannot disprove it beyond reasonable doubt; it therefore facilitates official public‑health messaging that might otherwise fall foul of advertising prohibitions.
Product placement and on‑demand advertising adjustments
Amends product‑placement rules to treat vaping and nicotine products differently: on‑demand programme services may carry advertising only if it is generic or category‑level (not brand‑level) and conducted under public‑authority arrangements. Transitional carve‑outs preserve earlier rules for programmes produced before specified dates, reducing retroactive disruption for broadcasters but tightening future advertising spaces.
Statutory review requirement
Requires the Secretary of State to review the Act’s operation over a period of not less than four and not more than seven years after passage, to consider economic and health impacts and to consult the devolved administrations. That creates a statutory checkpoint for reassessing practical effects and may be crucial for future regulatory tweaks or devolution‑sensitive roll‑outs.
This bill is one of many.
Codify tracks hundreds of bills on Healthcare across all five countries.
Explore Healthcare in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Public‑health authorities: Gain broader tools to restrict promotion and supply (including filters and device software) and an advertising defence to run population‑level campaigns without risking prosecution.
- Welsh enforcement bodies and public health budgets: Receive a statutory fixed‑penalty regime and explicit rules on using proceeds for enforcement and related public‑health activity.
- Internet service providers and large platforms: Obtain a clearer statutory safe‑harbour when they act as mere conduits, reducing exposure to criminal liability for user‑generated content if they comply with takedown obligations.
Who Bears the Cost
- Retailers and licensees (tobacco, vaping and accessories): Face tighter licensing, potential FPNs in Wales, and new compliance obligations for filters, device tech and advertising; some may need to alter inventory or sales systems.
- Manufacturers and importers of filters and vaping‑device technology: Must assess product design, labelling and software functions against new regulatory definitions and risk seizure, prohibition or forfeiture actions.
- Local enforcement authorities and courts: Will carry operational and administrative burdens — conducting investigations, issuing FPNs, managing forfeiture and compensation processes — potentially without commensurate additional funding outside Wales.
Key Issues
The Core Tension
The central dilemma is between an assertive public‑health approach that closes loopholes by expanding the regulatory perimeter (filters, device tech, online content) and the administrative, legal and commercial complexity that expansion creates — devolved enforcement, platform monitoring obligations and broad product definitions all protect young people but raise compliance costs, enforcement burdens and scope‑of‑power questions with no simple resolution.
The Bill mixes central direction with devolved implementation in ways that create practical friction points. It gives Welsh authorities discrete FPN tools while leaving enforcement definitions that require careful alignment across England, Scotland, Wales and Northern Ireland; the legislation deploys affirmative procedures for some Welsh‑made regulations but also lets the Secretary of State or national authorities step into enforcement functions.
That hybrid design risks disputes over who should lead major cross‑border investigations and who pays for enforcement activity when products cross devolved boundaries.
The ISP exceptions are narrow and conditional: they protect classic conduit, caching and hosting activity but predicate protection on not knowing about prohibited adverts and on prompt removal. In practice that creates a notification‑and‑response regime that shifts burden onto platforms to monitor and respond quickly.
The carve‑out for public‑health advertising eases some tensions but opens questions about who qualifies as a public authority and how those arrangements will be documented and overseen. Similarly, extending the regulatory net to 'filters' and software captures many previously ancillary products; that breadth helps close circumvention risks but may sweep in low‑risk goods or third‑party software with uncertain policy justification.
Finally, enforcement powers (temporary prohibitions, forfeiture, reimbursement orders, short custodial terms) give regulators teeth but also raise procedural and rights‑protection issues: compensation and appeal mechanisms are included, but the ability to prohibit supply for up to six months without immediate court oversight could be contentious if used frequently. The statutory review in four to seven years provides a backstop, but many practical decisions — e.g., definitions, delegated powers, and cross‑border enforcement protocols — will be left to secondary legislation and guidance.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.