Severity: Medium Amendment UK Action required

Data (Use and Access) Act 2025 modifies Data Protection Act 2018

Original title: Data (Use and Access) Act 2025 effect on Data Protection Act 2018

Published
Source: legislation.gov.uk
Effective
Not stated
Deadline
Not stated
Framework: UK GDPR
UK GDPR (as amended to 30 September 2026) source

Why it matters

The Data (Use and Access) Act 2025 has amended provisions of the Data Protection Act 2018 with effect from 23 March 2026. These modifications align the 2018 Act with new requirements for data use and access governance in the UK. Organizations subject to UK GDPR and the Data Protection Act 2018 should review the affected provisions to ensure compliance with the updated framework.

Who is affected

UK organizations subject to UK GDPR and Data Protection Act 2018, including data controllers and processors handling personal data under UK law.

What to do

AI-assisted summary of the official document; the official text prevails. Not legal advice.