Data Protection Act 2018 amended by Data (Use and Access) Act 2025

Original title: Data (Use and Access) Act 2025 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 introduces amendments to the Data Protection Act 2018 that came into effect on 23 March 2026. These amendments modify certain provisions of the 2018 Act to align with new data use and access requirements. Organisations subject to UK GDPR and the Data Protection Act 2018 will need to assess how these amendments affect their data handling practices and compliance obligations.

Who is affected

Organisations operating in the UK subject to UK GDPR and the Data Protection Act 2018, including data controllers and processors handling personal data.

Summary generated by a language model; the official text prevails. Not legal advice.