It says they need to have a policy. It doesn't say what the policy has to be, what the punishments are for breaching it, what exceptions could be allowed, who s

It says they need to have a policy. It doesn't say what the policy has to be, what the punishments are for breaching it, what exceptions could be allowed, who signs off on the policy etc. It also only applies for larger organisations. That's a long way from "it's illegal for your company to contact you out of hours".