Data Protection Act 2018 amended following Data (Use and Access) Act 2025

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 introduces consequential amendments to the Data Protection Act 2018 through secondary legislation that came into effect in 2026. These amendments align the DPA 2018 with the new data access and use framework established under the 2025 Act. Organisations subject to UK data protection law must review the updated DPA 2018 to ensure compliance with modified provisions and any new transitional requirements that may affect their data handling practices.

What changed

• The Data Protection Act 2018 has been amended by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (SI 2026/386), which introduces changes to align the Act with the new data access and use regime.
• Specific amendments to the DPA 2018 have been made to reflect the framework and requirements introduced by the Data (Use and Access) Act 2025, though the detailed provisions require review of the amended legislation.
• Transitional provisions have been introduced as part of the amendments, which may affect the timing and application of certain DPA 2018 requirements during the transition period.
• The amendments came into effect on 23 June 2026, requiring organisations to update their data protection compliance framework accordingly.

Who is affected

All organisations in the UK subject to data protection law, including data controllers and processors handling personal data under the UK GDPR and DPA 2018. The scope of affected entities depends on the specific nature of amendments to the DPA 2018, which may target particular data processing activities or sectors aligned with the Data (Use and Access) Act 2025.

Summary generated by a language model; the official text prevails. Not legal advice.