Data (Use and Access) Act 2025 amends UK GDPR data subject rights and controller obligations

Original title: Data (Use and Access) Act 2025 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

The Data (Use and Access) Act 2025 has come into force and introduces amendments to the UK GDPR (Regulation (EU) 2016/679). The amendments modify data subject rights and controller obligations under UK GDPR. Organizations subject to UK GDPR must review and adjust their data handling processes, access request procedures, and compliance documentation to align with the new requirements introduced by this Act.

Who is affected

Organizations processing personal data in the United Kingdom under UK GDPR, including data controllers and processors of all sizes operating in UK jurisdiction

Summary generated by a language model; the official text prevails. Not legal advice.