Data (Use and Access) Act 2025 affects Data Protection Act 2018 provisions

Original title: Data (Use and Access) Act 2025 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 modifies provisions of the Data Protection Act 2018 as of 23 March 2026. This affects how organisations handle data protection obligations and compliance requirements under UK law. The changes integrate new data access and use frameworks into existing data protection legislation, requiring organisations to review their compliance procedures and data handling practices in light of these amendments.

What changed

• The Data (Use and Access) Act 2025 introduces legislative changes affecting the Data Protection Act 2018, effective from 23 March 2026
• Amendments modify key provisions of the DPA 2018 to align with new data access and use requirements
• Changes affect how organisations must manage data protection compliance in relation to data access frameworks
• The modifications require organisations to integrate new obligations into their existing data governance and compliance structures

Who is affected

All UK organisations processing personal data and subject to the Data Protection Act 2018, including controllers and processors across all sectors

Summary generated by a language model; the official text prevails. Not legal advice.