Data Protection Act 2018 amended to implement Data (Use and Access) Act 2025

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduce amendments to the Data Protection Act 2018 to align it with the new data access and use framework. These changes ensure consistency between the existing data protection regime and the new legislative requirements for data sharing and access. Organisations subject to UK GDPR and DPA 2018 should review how these amendments affect their data handling practices and governance frameworks.

What changed

• The Data Protection Act 2018 is amended through The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026, which came into force on 23 June 2026.
• Consequential amendments align the DPA 2018 with the new framework established by the Data (Use and Access) Act 2025 for data sharing and access rights.
• Transitional provisions are specified in the regulations to manage the implementation of changes for existing data processing arrangements.

Who is affected

All organisations in the UK subject to Data Protection Act 2018, including those processing personal data under UK GDPR. Particularly affects data controllers and processors managing data access arrangements.

Summary generated by a language model; the official text prevails. Not legal advice.