Severity: Medium Amendment UK Action required

Employment Rights Act 2025 affects interpretation of Data Protection Act 2018 provisions

Original title: Employment Rights Act 2025 effect on Data Protection Act 2018

Published
Source: legislation.gov.uk
Effective
Not stated
Deadline
Not stated
Framework: UK GDPR
UK GDPR (as amended to 30 September 2026) source

Why it matters

The Employment Rights Act 2025 has amended provisions relevant to the Data Protection Act 2018, particularly regarding employment-related data processing. This affects how organisations must handle personal data in employment relationships, as the new employment law provisions now interact with UK GDPR obligations under the DPA 2018. Organisations must review their data processing practices to ensure compliance with both the updated employment rights framework and existing data protection requirements.

What changed

  • Employment Rights Act 2025 provisions now affect the interpretation and application of specific Data Protection Act 2018 sections related to employment data processing
  • The interaction between employment law rights and data subject rights under UK GDPR has been modified to reflect new employment protections
  • Organisations must reassess lawful basis and consent requirements for employment-related personal data processing under the updated legal framework

Who is affected

All organisations processing personal data of employees and job applicants in the UK, particularly those in sectors with significant employment data handling. The change affects data controllers and processors across all sectors subject to UK GDPR.

What to do

AI-assisted summary of the official document; the official text prevails. Not legal advice.