Data (Use and Access) Act 2025 amends UK GDPR framework

Original title: Data (Use and Access) Act 2025 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

The Data (Use and Access) Act 2025 modifies the UK GDPR regulatory framework with effect from 21 September 2026. This legislation introduces new requirements and mechanisms for data access and use, impacting how personal data can be processed and accessed under UK data protection law. Organisations handling personal data must review their policies and procedures to ensure compliance with the amended framework.

What changed

• Data (Use and Access) Act 2025 comes into effect and modifies UK GDPR provisions
• New data access rights framework established under UK GDPR
• Amendments to personal data processing requirements introduced
• New mechanisms for data use and portability under UK GDPR framework

Who is affected

All organisations processing personal data in the United Kingdom under UK GDPR jurisdiction

Summary generated by a language model; the official text prevails. Not legal advice.