The Risk Register is a key document set out in the Performance Assurance Schedule. This schedule drives the structure of the risk register as follows: 1. It drives the Risk Register to focus on Retail Risk, which includes both compliance with the Code, but also the delivery of right outcomes, both for customers and market participants. 2. It is clear that the Risk Register covers both Party performance and that of the REC Service Providers. 3. It limits any Performance Assurance interventions to areas identified in the Risk Register. Retail markets are both dynamic and complex, often with specific issues occurring and needing to be resolved quickly, with information from multiple participants needed to identify their root cause. The Risk Register, therefore, is structured with risks structured around the REC objectives. ‘Risk Drivers’ are associated with risks which measure the market and trigger appropriate action. These Risk Drivers can measure either compliance or customer outcomes. This Risk Register is reviewed annually by the Code Manager and approved by PAB. The Code Manager has conducted a review for 2025-26 and proposed changes covering: • Removed Retail Risk VI which was added last year as a result of expected increase in transformation activities resulting from transfer of responsibility for the Central Registration Service (CRS) from DCC to RECCo. Whilst there continues to be transformation of REC Service Provision, the level of risk associated with it is reduced. This is, therefore, no longer viewed as a key risk affecting the effective operation of REC arrangements. • Introduction of new Risk Drivers to monitor: o Usage of Change of Occupier (CoO) flag during switching. These are separated by Domestic and Non-Domestic supply points as trends and behaviours in both segments may vary. Based on insights from R0155, which clarified the REC requirements for CoO, we understand if the CoO flag is misused, it can lead to Erroneous Switches especially if some Suppliers have opted to not object to CoO Switch Request. Introducing this Risk Driver helps us monitor if any Supplier have disproportionality high usage, indicating if outcomes were at risk. Once these Risk Drivers are live, we will review performance for the previous 6 months as the CSS reporting is already available and propose thresholds for PAB approval in the following month. o IF045 for issues with Meter Operator Agent (MOA) Appointments. Suppliers are required to appoint a qualified MOA to every meter point they supply, and it measure would help us measure their compliance and identify any meter points open to safety risk due to lack of MOA appointment. This is dependent on reporting from DIP after migration to MHHS arrangements starts. Once the reporting is available and we have a view for c. 6 months of performance data, we will use that to propose thresholds for this Risk Driver. • General housekeeping changes, including: o Removed reference to activities that formed part of the Performance Assurance Operating Plan (PAOP) for 2024-25. o Added reference to activities within PAOP 2025-26. o Updated reference to active REC Change Issues and Proposals. When making these updates, we also considered other possible updates to the Risk Register. Notably this included considering items that have progressed through the change process and rejected or withdrawn, but evidence suggests there is still a user need or risk. These include: a. R0169 Introduction of End of Gate Closure notifications, a change raised in response to the CSS Major Incident in 2023, which intended to help CSS Users identify when all processing is completed. b. R0009 Introduction of SDEP and EES User Maintenance API, which recent sandbox applications indicate a continued need for machine-to-machine interactivity. Both of these were rejected or withdrawn as a cost beneficial solution could not be identified. Whilst we considered raising a Retail Risk, we think these kinds of identified issues are best managed through the Change Panel and Codes Roadmap, or the future Design Authority. This consultation offers REC Parties and Service Providers an opportunity to feedback on the updates proposed to the Retail Risk Register. The Code Manager has also presented this document to the Performance Assurance Board (PAB) on 30 September 2025 and sought their approval, contingent to any refinements that may be made in response to the feedback received. As the Retail Risk Register is a Category 3 document, an industry wide consultation is not required as part of updating the document. Notwithstanding, we have identified that engaging with industry is a key part of implementing the changes and are therefore seeking feedback through a consultation in order to support our Performance Assurance activity.

It is currently not possible for organisations with multiple role types to have the same person be able to access all assigned role types within the Secure Data Exchange Portal (SDEP) without having a unique email address for each role type.

The issue identified is that current arrangements require or assume that legacy Meter Asset Providers (MAPs) take back old, non Smart Meters once they are removed from Consumers’ Premises, even though many of these meters are obsolete, cannot be reused, and ultimately require disposal. This has resulted in large volumes of legacy meters being transported across the country between storage providers and legacy MAPs, creating unnecessary cost, administrative burden, and environmental impact. Storage providers are issuing extensive lists of Meter Serial Numbers (MSN) to try to establish meter ownership, and legacy MAPs must manually verify these details. This process has been made more difficult by historical changes in company names and ownership structures. Once ownership is confirmed, the meters are frequently transported to the legacy MAP only for them to arrange disposal, which provides no net value and simply adds further transportation and handling costs.

CSS Market Messages sent by the Central Switching Service (CSS) to Switching Data Service Providers (SDSPs) are either not being received, being received after Gate Closure, or are being received out of the order that they were originally sent in. This Issue originally aimed to extend the Refresh functionality, implemented for the Gas Retail Data Agent (GRDA).to the Electricity Retail Data Agent (ERDA). Following solution development for I0281, it was agreed that the Refresh functionality would be made available for all Market Participants in receipt of the in-scope messages.

This Cat 3 CP is to implement the Electricity Enquiry Service and Secure Data Exchange Portal User Guides following updates made to the service for MHHS.

This Cat 3 CP is to implement an updated Electricity Enquiry Service Data Access Matrix, which captures the permissions approved for new user categories and new data items under MHHS. The proposed data access permissions were approved by the Performance Assurance Board on 17/12/2024 and industry consulted on the updated EES DAM in 18/12/2024 to 15/01/2025.

This Cat 3 CP is to implement the new ‘Guidance on Electricity Metering Points – MHHS’. This is an additional document to the existing ‘Guidance on Electricity Metering Points’. It includes amendments to make the document relevant for MHHS Metering Points. The existing document remains valid for non-MHHS Metering Points.

This Cat 3 CP is to implement the following new metering guidance documents created to support Parties with understanding systems and processes updated for the new Market-wide Half Hourly Settlement (MHHS) arrangements: Sharing Metering Asset Data – MHHS Guidance Document Change of Market Segment – MHHS Guidance Document MOA Appointment – MHHS Guidance Document These documents were consulted on in June and July 2025 and were approved by the Metering Expert Panel to be implemented as Category 3 documents under their responsibility at the July and August MEP meetings.

This change proposes that several data items be made available for NESO to fulfil its role in the strategic direction of the GB energy system.

This proposal recommends the formal recognition of the Safe Isolation Provider (SIP) as a standalone Party under the Retail Energy Code (REC). This aligns with the direction set out in Ofgem’s recently published Strategic Direction Statement (SDS), which explicitly calls for the establishment of SIPs as a standalone Party role. The aim is to address the growing scale of unregulated SIP activity, mitigate associated consumer safety risks, and ensure the metering industry is equipped to support the UK’s Net Zero ambitions. By enabling easier access to certified SIPs, this change will enhance consumer protection, accelerate low-carbon technology deployment, and improve operational efficiency across the energy sector.