Data Protection Act 2018 amended by Data (Use and Access) Act 2025

Original title: Data (Use and Access) Act 2025 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 introduces amendments to the Data Protection Act 2018. These changes affect how organisations must handle data protection obligations and implement data governance frameworks under UK law. The amendments came into effect on 23 March 2026 and modify key provisions of the 2018 Act. Organisations subject to UK data protection law must review and update their compliance procedures to align with the new requirements introduced by this amending legislation.

What changed

• Data Protection Act 2018 modified by Data (Use and Access) Act 2025 (effective 23 March 2026)
• Specific amendments to data protection requirements introduced by the 2025 Act affect how organisations apply GDPR principles and implement data governance
• Changes to data handling and processing obligations as defined in the 2018 Act
• Updates to compliance frameworks required under UK data protection legislation

Who is affected

All organisations processing personal data in the United Kingdom subject to the Data Protection Act 2018, including those also regulated by UK GDPR. Affects data controllers and processors of all sizes operating within UK jurisdiction.

Summary generated by a language model; the official text prevails. Not legal advice.