Data (Use and Access) Act 2025 creates new obligations under UK GDPR framework

Original title: Data (Use and Access) Act 2025 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 modifies the application and interpretation of the Data Protection Act 2018 in the UK legal framework. This creates additional compliance obligations for organizations handling personal data under UK GDPR, particularly regarding data access rights and permitted uses. Organizations must review their data governance practices to ensure alignment with both the original Data Protection Act 2018 requirements and the new provisions introduced by the 2025 Act.

What changed

• Data Protection Act 2018 is now affected by provisions in the Data (Use and Access) Act 2025
• New requirements may apply to how organizations manage data access rights under UK GDPR
• The legal framework for data use and access has been expanded beyond the original 2018 Act provisions

Who is affected

All organizations in the UK that process personal data under UK GDPR, particularly those subject to the Data Protection Act 2018. The impact extends across all sectors and organization sizes that handle personal data.

Summary generated by a language model; the official text prevails. Not legal advice.