Data (Use and Access) Act 2025 amends Data Protection Act 2018

Original title: Data (Use and Access) Act 2025 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 introduces amendments to the Data Protection Act 2018, affecting how UK GDPR requirements are applied. Organisations handling personal data under UK GDPR must review changes to ensure their data processing, governance, and compliance documentation align with the amended legislation. The modifications came into effect on 23 March 2026.

What changed

• The Data (Use and Access) Act 2025 introduces legislative changes to the Data Protection Act 2018 framework, affecting the implementation of UK GDPR requirements

Who is affected

All organisations processing personal data subject to UK GDPR, including data controllers and processors operating in or affecting individuals in the United Kingdom

Summary generated by a language model; the official text prevails. Not legal advice.