Data (Use and Access) Act 2025 amends UK GDPR provisions

Original title: Data (Use and Access) Act 2025 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

The Data (Use and Access) Act 2025 has been brought into effect, modifying specific provisions of the UK GDPR (Regulation (EU) 2016/679 as retained in UK law). These amendments update how data controllers and processors must handle data subject rights and processing obligations. Organizations subject to UK GDPR must review and implement the relevant changes to ensure continued compliance with the amended framework.

What changed

• The Data (Use and Access) Act 2025 amends the UK GDPR framework effective from 23 March 2026, introducing modifications to data controller and processor obligations
• Specific provisions affecting data subject rights and access mechanisms have been updated under the amended UK GDPR
• Changes to the legislative framework for data use and access have been implemented through this Act

Who is affected

All organizations processing personal data in the United Kingdom subject to UK GDPR, including data controllers and processors; affects any entity handling personal data of UK residents or within UK jurisdiction

Summary generated by a language model; the official text prevails. Not legal advice.