Your Checkout Is a Legal Document — What the AA's £4.2 Million Fine Means for UK Businesses

On 15 April 2026, the Competition and Markets Authority (CMA) issued its first financial penalty under new direct enforcement powers introduced by the Digital Markets, Competition and Consumers Act 2024 (DMCCA). The target was Automobile Association Developments Limited — the parent company of AA Driving School and BSM Driving School — one of the most recognised consumer brands in the United Kingdom.

The CMA found that both driving schools had engaged in unlawful drip pricing between April and December 2025. A mandatory £3 booking fee was not included in prices shown to customers at the start of the booking journey. For new customers, the full price appeared only at final checkout — after an instructor had been selected, lesson times chosen, and personal details entered. For returning customers, the fee was shown separately and only incorporated into the total on a subsequent page.

The outcome: a £4.2 million fine, over £760,000 in mandatory customer refunds, and the distinction of becoming the first company publicly penalised under the CMA's new consumer law regime.

This briefing explains what happened, why it matters beyond the driving instruction sector, and what every UK business operating an online sales or booking journey must now understand.

SECTION 1: THE REGULATORY LANDSCAPE HAS CHANGED

The DMCCA received Royal Assent in May 2024 and its consumer protection provisions came into force on 6 April 2025. The legislation fundamentally altered the CMA's enforcement model.

Prior to April 2025, the CMA was required to pursue consumer protection violations through the courts — a process that was slow, resource-intensive, and uncertain enough that many businesses assessed the legal risk as commercially manageable. The DMCCA removed that friction entirely.

Under the new regime, the CMA can investigate businesses directly, issue binding infringement notices, impose financial penalties of up to 10 per cent of global annual turnover, and order consumer redress — all without recourse to court proceedings. The AA case was concluded within five months of the investigation being announced publicly in November 2025. That pace of enforcement is itself a signal.

The maximum discount available for early settlement and full cooperation is 40 per cent. The AA's original fine was £7 million. Their cooperative engagement with the regulator, including an admission of the breach, reduced the final penalty to £4.2 million. Businesses that contest findings or delay corrective action should not expect the same outcome.

The CMA has been explicit about its priorities. In November 2025, it launched a major consumer protection drive focused on online pricing practices, opening investigations into eight businesses simultaneously. As of April 2026, investigations into StubHub, Viagogo, Gold's Gym, Wayfair, Appliances Direct, and Marks Electrical remain ongoing. In March 2026, five further investigations were opened into suspected fake and misleading reviews, alongside a separate probe into early cancellation fees.

The AA case is not an isolated intervention. It is the opening action of a sustained enforcement programme.

SECTION 2: WHAT DRIP PRICING IS AND WHY IT BECAME WIDESPREAD

Drip pricing is the practice of advertising a headline price to consumers and then adding mandatory charges progressively as the customer moves through the purchase journey. By the time the full cost is displayed, the consumer has already invested time, completed selections, and in many cases entered personal and payment information. The psychological effect — known in behavioural economics as sunk cost bias — significantly reduces the likelihood of abandonment at the final stage, even when the revealed total differs from the initial impression.

The commercial appeal of drip pricing is well documented. A 2023 study by the Department for Business and Trade found that 46 per cent of UK online businesses were using some form of hidden or dripped fees. The same research estimated that consumers collectively spend between £595 million and £3.5 billion in additional, unplanned charges online each year as a direct result of these practices. Service fees, booking charges, and processing fees were identified as the most commonly concealed mandatory costs.

Drip pricing is not a practice confined to disreputable operators. It has been embedded across significant portions of the UK digital economy — in travel booking, event ticketing, subscription services, home services, and professional lesson booking — precisely because it is effective at improving headline conversion metrics. The incentive to use it was real. The legal constraint, for many years, was theoretical.

That calculation has now changed materially.

SECTION 3: THE AA — A CASE STUDY IN COMPLIANCE FAILURE

The specific failure identified by the CMA in the AA case is instructive because it represents a pattern likely to be present in many other online booking and e-commerce systems built or iterated upon before April 2025.

The AA's booking journey presented customers with a lesson price that excluded the mandatory £3 booking fee. That fee was not concealed in the sense of being invisible — it did appear during the checkout process. The violation was one of timing and presentation: the fee was not included in the price from the moment the price was first shown.

Under the DMCCA, the legal standard is unambiguous. If a fee is mandatory — meaning no customer can complete a purchase without paying it — that fee must be included in the displayed price from the first moment any price is communicated to the consumer. This applies to listing pages, search results, comparison widgets, in-app displays, email marketing, and any other touchpoint at which a price is presented as part of an invitation to purchase.

The distinction between new and returning customers in the AA's checkout flow is also significant. For new customers, the full price appeared only at final checkout. For returning customers, the fee was shown separately on an intermediate page. Neither pattern was compliant. The law does not differentiate based on customer type or on how close to checkout the disclosure occurs. Mandatory fees belong in the headline price from the outset. Disclosure at any later point — however prominent — does not satisfy the legal requirement.

The AA's response following the investigation is also worth noting. In a public statement, the company acknowledged that the booking fee "was made clear to customers prior to their purchase" but accepted it should have been displayed at the start of the booking journey. That framing — accurate disclosure at some point in the process, just not the right point — reflects a misunderstanding that is likely common across the industry. Disclosure and compliance are not the same thing under the DMCCA.

SECTION 4: THE COMMERCIAL COST BEYOND THE FINE

The direct financial impact on the AA — £4.2 million in fines and £760,000 in refunds, totalling approximately £5 million — is substantial. However, a full assessment of the commercial cost requires consideration of factors that do not appear in the CMA's infringement notice.

The AA was reportedly exploring either a sale or a stock market listing in late 2025, following its £219 million take-private deal in 2020. A public regulatory rebuke from the CMA — as the first company fined under new consumer law powers — is not a neutral event in the context of investor due diligence or acquisition conversations. The reputational signal it sends to prospective buyers, financial advisers, and institutional audiences is difficult to quantify and unlikely to be positive.

The administrative burden of issuing over 80,000 individual refunds — to card or by cheque where the original card is no longer active — represents a further operational cost that does not appear in the headline figures. The CMA's requirement that the AA identify, contact, and reimburse each affected customer places a significant process and resourcing demand on the business.

There is also the matter of brand positioning. The AA has operated for over 120 years on a consumer trust proposition. The driving school division serves learner drivers — a demographic under significant financial pressure, at a time when Department for Transport data shows the proportion of 17 to 20-year-olds holding a full driving licence has fallen from 37 per cent in 2018 to 29 per cent in 2024, with the cost of tuition cited as the primary deterrent. Being publicly identified as having hidden fees from this specific group of consumers is not a brand story that can be quickly reframed.

The revenue generated by the booking fee across the nine-month investigation period amounts to approximately £240,000 — based on 80,000 transactions at £3 each. The total cost of retaining that revenue is approaching £5 million, before operational and reputational costs are factored in. The arithmetic is not ambiguous.

SECTION 5: WHAT THIS MEANS FOR YOUR BUSINESS

The AA case establishes a clear precedent and, given the CMA's stated enforcement priorities, it is reasonable to treat drip pricing as a high-probability enforcement target for any business whose checkout flow has not been reviewed against DMCCA requirements.

The following categories of business carry particular exposure.

Businesses operating booking systems for lessons, appointments, treatments, or events where a mandatory booking, administration, or platform fee is applied. If that fee is not included in the price displayed on the listing or availability page, the checkout flow is potentially non-compliant.

E-commerce businesses applying mandatory processing, service, or handling fees that do not appear in the listed product price. This includes businesses where delivery is mandatory on all orders but is presented as a separate line item added at checkout.

Subscription and SaaS businesses where a mandatory setup, onboarding, or activation fee is charged on first purchase but not included in the advertised monthly or annual price.

Service businesses where mandatory administrative charges, disbursements, or surcharges are added to quotations or proposals that the client must accept before the charge is disclosed.

The law does not provide a size threshold. A sole trader operating a booking system and a national driving school are subject to the same requirement. The scale of potential fine is proportional to turnover, but the compliance standard is absolute and uniform.

The practical test for any business is straightforward. Take a new customer journey through your online purchase or booking process from the first page on which a price appears. Record every number displayed. Compare the first price shown to the total charged at checkout. If mandatory fees cause those numbers to differ, the gap represents a compliance risk that requires immediate attention.

SECTION 6: THE BROADER ENFORCEMENT CONTEXT

The AA case sits within a larger regulatory shift in how consumer protection law is applied to digital commerce in the United Kingdom.

The DMCCA was designed in response to evidence that the previous enforcement model — requiring court action to compel compliance — was insufficiently effective as a deterrent. The legislation gives the CMA the tools to act quickly, penalise meaningfully, and require consumer redress directly. The pace of the AA investigation — five months from public announcement to concluded enforcement — demonstrates that those tools are operational and being used at speed.

The CMA has also introduced a Clear Pricing campaign providing businesses with a practical compliance checklist, and has issued advisory letters to over 100 businesses as part of its broader pricing transparency work. The combination of published guidance, advisory communication, and active enforcement makes it increasingly difficult for businesses to claim they were unaware of the requirements.

Beyond drip pricing, the CMA's current enforcement programme encompasses fake and misleading reviews, time-limited sales that do not end when advertised, and subscription services that make cancellation unnecessarily difficult. The common thread across all of these is information asymmetry — the exploitation of the gap between what businesses know about their own pricing and practices, and what consumers can readily verify. The DMCCA is structured to close that gap through transparency requirements and to enforce those requirements with material consequences.

Businesses that have not reviewed their online customer journeys against DMCCA requirements should do so as a matter of priority. The regulatory environment has changed, the CMA is actively enforcing, and the cost of non-compliance has increased substantially.

SECTION 7: RECOMMENDED ACTIONS

Audit the complete customer journey. Review every digital touchpoint at which a price is presented to a prospective customer — listing pages, search and filter results, promotional content, email communications, in-app displays, and checkout flows. Identify every mandatory fee, charge, or cost that is not included in the first price displayed.

Review pricing architecture with your development or digital partner. The DMCCA compliance requirement is not a content change. It is a structural question about how prices are calculated and rendered. Mandatory fees need to be incorporated into displayed prices at the point of first calculation, not added as separate items during checkout. This requires a technical review of how pricing components are assembled and presented across the purchase journey.

Establish an ongoing compliance review process. The DMCCA came into force in April 2025. Many businesses built or iterated their checkout flows before that date and have not revisited them in light of the new requirements. A one-time audit is necessary but not sufficient. Consumer protection law will continue to develop, and the CMA's enforcement priorities will evolve. Businesses that treat compliance as a standing operational concern rather than a periodic exercise will be better positioned as that landscape changes.

Brief relevant internal stakeholders. Pricing compliance under the DMCCA is not solely a legal or technical matter. Marketing teams making decisions about how prices are presented in campaigns, product teams designing checkout flows, and finance teams structuring fee models all have a role in maintaining compliance. The AA case illustrates what happens when pricing decisions are made without explicit consideration of their legal implications.

CONCLUSION

The CMA's action against the AA is the first use of new enforcement powers that are now fully operational. It is not the last. With active investigations open across multiple sectors and a clear public commitment to sustained enforcement, the regulatory environment for UK businesses operating online sales and booking journeys has changed materially.

The compliance requirement is not technically complex. Mandatory fees belong in the price from the first moment the price is shown. The consequences of not meeting that requirement — as the AA has demonstrated — extend well beyond the fine itself, into refund operations, reputational exposure, and commercial positioning at the moments that matter most.

Transparent pricing is not a constraint on commercial effectiveness. It is a foundation for the consumer trust on which sustainable digital businesses are built.

ABOUT PARADIGM SHIFT MULTIMEDIA

Paradigm Shift Multimedia is a London-based digital studio operating across software development, creative production, and brand strategy. We design and build digital systems that are commercially effective, legally considered, and built for long-term brand equity. For a consultation on checkout architecture, pricing compliance, or digital strategy, contact us at paradigmshiftmultimedia.com.

For a technical breakdown of the code patterns behind this issue — including compliant checkout architecture and a DMCCA developer reference — read the companion article at mikeadeleye.dev/aa-drip-pricing-checkout-code-fix