Severity: High Amendment UK Action required
Data (Use and Access) Act 2025 amends UK GDPR
Original title: Data (Use and Access) Act 2025 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)
- Published
- Source: legislation.gov.uk
- Effective
- Deadline
- Not stated
Why it matters
The Data (Use and Access) Act 2025 (ukpga/2025/18) has taken effect on the UK GDPR, modifying Regulation (EU) 2016/679 as it applies in the United Kingdom. Organisations subject to UK GDPR must review the amended provisions to ensure their data processing activities, policies, and procedures remain compliant with the updated legislative text.
What changed
- The Data (Use and Access) Act 2025 introduces legislative amendments to the UK GDPR (Regulation (EU) 2016/679 as retained in UK law), with changes taking effect as of 6 November 2026.
Who is affected
All organisations processing personal data subject to UK GDPR — any sector, any size, operating in or targeting individuals in the United Kingdom.
What to do
AI-assisted summary of the official document; the official text prevails. Not legal advice.