Firmware Locks and the UK's Right-to-Repair Rules
Take your phone in for a battery replacement and there is a reasonable chance it will still work perfectly, but nag you about it. None of that is a hardware fault. It is firmware checking a serial number against a part it does not recognise, because the manufacturer's software will not authorise a component it did not personally sell you.
The symptoms are familiar to anyone who has had a phone repaired independently:
- an "unable to verify this is a genuine battery" warning
- a fingerprint sensor that refuses to re-pair
- a screen that loses its colour calibration
This is "parts pairing", and it has become the sharpest edge in the right to repair debate. Even when the repair itself is simple and the spare part is functionally identical, the device's firmware can refuse to treat it as such.
The UK has had ecodesign based right to repair rules since 2021. So does the law already deal with this? Mostly not, and the reasons why are a useful tour through how these regulations are actually built.
The 2021 rules cover white goods and screens, not gadgets
The relevant law is the Ecodesign for Energy-Related Products and Energy Information (Amendment) Regulations 2021 (SI 2021/745). It came into force on 1 July 2021 and is usually just called the UK's right to repair regulations.
It does not create a single, standalone "right to repair" as a piece of consumer legislation in its own right. Instead it amends a set of existing, product-specific ecodesign regulations, retained from EU law after Brexit, covering:
- washing machines and washer-dryers
- dishwashers
- refrigerators and freezers
- electronic displays, including televisions
For each of those categories, manufacturers, importers or their UK authorised representative must make certain spare parts available to professional repairers. That is typically for seven to ten years after the last unit of a model is placed on the market, depending on the part.
They must also supply repair and maintenance information. Parts have to be replaceable using commonly available tools, without permanent damage to the appliance. A repair shop should not need a proprietary diagnostic rig just to swap a door seal or a display panel.
The genuinely new bit is firmware alongside the parts
The novelty in the 2021 amendment, compared with the ecodesign rules that came before it, is software. Manufacturers must also make available the latest firmware, software and security updates to professional repairers, for the same length of time they are obliged to supply spare parts.
Before this, a repairer could obtain a replacement control board with no guarantee of the software needed to make it function correctly.
The regulations also state that manufacturers cannot obstruct or impede repair through contractual terms, hardware design or software techniques, unless that obstruction is objectively justifiable.
"Objectively justifiable" is the whole legal hook
That phrase is the entire legal hook that a firmware lock would have to survive if these rules ever applied to it. It is deliberately open-ended: a manufacturer can argue a lock exists for safety, calibration accuracy or fraud prevention rather than to suppress competition.
Nobody has had to test that argument in court in this context. Largely, that is because the products where firmware locking is most aggressive are not covered by these regulations in the first place.
None of this touches your phone
Read the scope again: washing machines, dishwashers, fridges, TVs. Smartphones, tablets and laptops are absent, and so is most of the small consumer electronics where parts pairing is actually a live problem.
Actually, this is the interesting bit: the two product groups fail in different ways. White goods do not typically ship with firmware that individually serialises a battery or a screen to one specific unit. The repair barrier there is mechanical (fasteners, adhesive, unavailable parts) rather than cryptographic.
Phones are where the two collide, and the 2021 regulations were never written with them in mind.
The EU got there first, and Northern Ireland got it by default
The EU closed part of that gap with Commission Regulation (EU) 2023/1670. It is an ecodesign regulation for smartphones, cordless phones and tablets that has applied across the EU since 20 June 2025. It requires:
- seven years of spare parts availability after a model leaves sale
- batteries replaceable with commonly available tools
- at least five years of security updates
- rules against devices detecting test conditions and behaving differently to inflate durability or repairability scores
It also pushes on the idea that repair information and parts access should not be conditional on things an independent repairer cannot reasonably obtain. That is the closest EU ecodesign law gets to addressing parts pairing directly. Campaigners have pointed out, though, that serialised batteries and screens can still trigger warnings even when the replacement part is entirely genuine.
Belfast and Bristol are on different rules for the same phone
Because Northern Ireland continues to follow EU single market rules for goods under the Windsor Framework, that regulation already applies there. Great Britain does not have an equivalent yet.
The UK government has been developing a parallel smartphone and tablet ecodesign instrument. The expected timeline:
- a draft statutory instrument expected before Parliament in summer 2026, with a consultation running into the rest of the year
- manufacturers needing compliance plans in place by January 2027
- the rules taking full effect on 1 July 2027
Until then, a repair shop in Belfast is operating under materially stronger firmware and parts obligations than one in Bristol, for identical phones sold by the identical manufacturer.
This "right" is enforced by a regulator, not by you
It is worth being honest about what kind of right this is. Ecodesign regulations are enforced by the Office for Product Safety and Standards, a market surveillance body. There is no private right of action for the person whose phone or dishwasher has been hobbled by a firmware check.
A consumer whose washing machine's control board refuses a compatible part cannot personally sue under SI 2021/745. They can complain to OPSS or trading standards and hope for an investigation, which is a slower and less certain remedy than it sounds when described as a "right".
Doing it yourself runs into copyright law
There is also a quieter tension worth knowing about if you would rather flash a spare control board yourself than wait for a professional repairer to be granted access.
Section 296ZA of the Copyright, Designs and Patents Act 1988 makes it a civil wrong, and in some circumstances a criminal offence, to circumvent an effective technological protection measure.
Ecodesign law obliges a manufacturer to supply firmware to a professional repairer. It does not obviously give an individual the right to reverse-engineer a lock themselves if the manufacturer simply refuses, delays, or restricts firmware access to an approved repairer network. The two pieces of law were not written with each other in mind, and it shows.
Useful for your kitchen, still pending for your pocket
None of this makes the 2021 regulations pointless. Appliance repairers now have a genuine, enforceable claim to parts, tools and software that did not exist before.
It means the rules actually in force right now stop at the appliances in your kitchen, and the fix for the device in your pocket is still sitting in a consultation response. Until 2027 the strength of your right to repair a phone in this country depends, oddly, on which side of the Irish Sea you happen to be standing.