Data (Use and Access) Act 2025 amends Data Protection Act 2018

Original title: Data (Use and Access) Act 2025 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 has amended the Data Protection Act 2018 with changes effective from 23 March 2026. These amendments modify how organisations must handle data processing, access rights, and compliance procedures under UK data protection law. Organisations subject to UK GDPR and the Data Protection Act 2018 should review the specific amendments to ensure their policies, procedures, and technical measures align with the updated requirements.

What changed

• Data (Use and Access) Act 2025 amends provisions of the Data Protection Act 2018, effective 23 March 2026. Specific amendments affect data processing obligations, rights of data subjects, and regulatory compliance procedures. Consult the legislation for detailed changes to relevant sections.

Who is affected

Organisations processing personal data in the UK subject to UK GDPR and the Data Protection Act 2018, including private sector entities, public authorities, and other data controllers and processors.

Summary generated by a language model; the official text prevails. Not legal advice.