Who Can Decide, Licence, Enforce and Protect Consumers

Where governance stands

The institutional map shifted more in the last twenty months than in the previous twenty years, but the high-level shape is now settled. A National Energy System Operator (NESO) launched as a public corporation, independent of National Grid, on 1 October 2024 under the Energy Act 2023, and sits at the centre of system planning and operation. The second phase of the Review of Electricity Market Arrangements concluded in 2025: zonal wholesale pricing was set aside and a reformed national pricing approach adopted, with the Strategic Spatial Energy Plan as the centrepiece of strategic planning.⁸¹⁴ Ofgem became the regulator for heat networks in January 2026, the first new licensing regime added to its remit in years.

What remains uncertain is delivery pace, not framework. The live questions are whether the rule-change pipeline can move at the speed the 2030 clean-power target needs, and how the relationships between the regulator, the system operator and the network companies settle now that whole-system planning duties land in several places at once. The Connections Reform Gate 2 results of April 2026 (283 GW of generation and storage and 99 GW of demand progressed), the network plan methodology approved the same month, and the move of the network data model onto a validated standard are the current tests of that pace.¹⁶¹³⁹

Who governs, layer by layer

Authority runs in a chain, from the laws Parliament passes down to the company that switches a substation. Each layer can do some things and not others, and each answers to the layer above it. The map below names the layers and the power each one holds. The detailed, institution-by-institution view of who these bodies are and how they work together day to day is on the stakeholders page; the focus here is the decision right each layer carries.

1. Policy and law: Parliament, the Secretary of State and DESNZ

   Set the direction, pass the primary laws, and run the contracts that buy capacity and low-carbon generation. They do not regulate companies directly; they set the framework the regulator works inside, including a Strategy and Policy Statement the regulator must have regard to.

   Decides and directs
2. Regulator: Ofgem, the Gas and Electricity Markets Authority

   Issues and varies licences, approves or rejects the detailed rule changes, sets the revenue the monopoly networks may earn, enforces the rules, and protects consumers. It decides each case independently on the evidence, even though policy is set above it.

   Licenses, approves, enforces, protects
3. System operator: NESO

   Balances the system second by second, plans the transmission network, coordinates connections, and produces the national scenarios and the spatial and network plans. It also runs several of the industry codes.

   Plans and operates
4. Code bodies: Elexon, NESO, RECCo, the SEC and gas-code administrators

   Run the multi-party rulebooks that govern settlement, dispatch, charging, connection, switching and metering data. They administer the rule-change process and recommend; the regulator decides.

   Run the rulebooks
5. Networks: the transmission owners and distribution operators

   Own and run the wires under licence: three transmission owners and fourteen distribution licence areas across six groups. They build what the network plan calls for and publish their network data under licence conditions.

   Builds and runs the wires
6. Markets: generators, suppliers, traders and aggregators

   Compete under licence to generate, supply and trade electricity and gas, and to provide flexibility. Suppliers carry consumer-protection duties, including the price cap and the supplier-of-last-resort backstop.

   Generates, supplies and trades
7. Consumers and their champions: households, businesses, Citizens Advice, the Energy Ombudsman

   Use the energy and pay the bills. Citizens Advice is the statutory consumer advocate; the Energy Ombudsman settles unresolved complaints with binding awards. They advise and seek redress; they do not set rules.

   Uses energy; advocates and seeks redress

How a policy idea becomes a binding rule: the six gates

A policy idea cannot bind a company until it passes through a chain of authority. There are six gates, each with its own legal character and its own pace, and none can be skipped without breaking the chain that runs from an Act of Parliament down to the company that implements the change.

Most working life in energy is spent at gates 4, 5 and 6. The early gates move on political calendars; the later ones move on engineering calendars, with system-release windows and the lead time for safety-critical change setting the pace. The hardest friction sits where a licence change and a code change must land together for a new rule to work: Ofgem can coordinate them, but sequencing across several code bodies and the whole company population is one of the system's hardest jobs. Behind every code change is one standing power: Ofgem may direct that a modification be made, or made differently, where it better meets the code's objectives, under section 11A of the Electricity Act 1989.¹¹ Two large changes dominate the register: the connections queue redesign in the connection code,⁴ and the move to half-hourly settlement in the balancing code.⁷ The move of the network data model to a validated standard runs by a lighter route, a direction under a licence condition, adjusted by derogation letters.¹²

The instruments that steer delivery

Actors hold the pen, but instruments are what they move. Most live debates are about which instrument to use, not which body should act, because each instrument has a different legal character, a different revision cycle and a different route of challenge.

The network data model is the clearest worked example of the lighter instruments. A licence condition has required a Long Term Development Statement for years; a direction of 30 April 2024 turned it from spreadsheets into a validated, machine-readable model in stages; and three derogation letters since then adjusted the timetable, the most recent of 13 May 2026 holding the Stage 2 publication at 29 May 2026 while reshaping its contents.¹² The network plan is the worked example of a methodology: NESO submitted the Centralised Strategic Network Plan methodology, Ofgem approved it in April 2026, and that approved method is now the test the first plan will be judged against.⁹¹³ Price controls and the licence conditions that produce the network data are the standing instruments underneath both.¹⁰

Enforcing the rules and protecting consumers

Rules only matter if they are enforced and if they protect the people who pay. Ofgem enforces by monitoring licence compliance, issuing enforcement and provisional orders, imposing financial penalties of up to ten percent of a company's turnover, securing redress payments to affected consumers, and, in the last resort, revoking a licence. A company can appeal a licence modification to the competition authority within six weeks; other regulatory decisions can be challenged by judicial review in the High Court. The point of the appeal routes is that the regulator's power is real but bounded: it must act on evidence and within the law.

Consumer protection runs through several instruments at once. The default tariff cap, set by Ofgem each quarter under the Domestic Gas and Electricity (Tariff Cap) Act 2018, limits the price of a standard tariff and is the most visible single piece of consumer regulation in Great Britain.¹² If a supplier fails, a supplier-of-last-resort process moves its customers to another licensed supplier so no one is cut off. The Energy Ombudsman gives a household a free, binding route to redress for an unresolved complaint, and Citizens Advice is the statutory advocate that brings consumer evidence into every consultation. Specific duties protect people in vulnerable circumstances: the Priority Services Register, restrictions on disconnection, and support tied to fuel poverty, which the latest official statistics estimate at 9.4 percent of households in England.¹⁸

The newest piece is the extension of protection to whole new markets and to data. Ofgem became the heat-networks regulator in January 2026, bringing heat-network customers consumer protections for the first time.¹⁵ And the Data (Use and Access) Act 2025, most of which came into force in early 2026, sets the legal basis under which a consumer can let an approved third party use their energy data, with the safeguards that go with it.⁶ Enforcement and consumer protection are where the governance system meets the household most directly, and where its credibility is tested.

Ten worked decisions and the powers behind them

The table traces ten live decisions from the kind of decision, through the body and the legal basis, to the timescale and the result. It shows the same point each time: even when the political framing is new, the decision lands inside an existing legal hook.

Reading a live debate is easier from the question: which instrument is being used? A licence change moves on Ofgem's calendar; a code change on the code body's; a derogation on a much shorter one because the underlying instrument is unchanged; a new licence category needs legislation; and a bespoke contract moves on a negotiation timeline of its own. Once the instrument is named, the body, the timescale and the route of challenge all follow.