Data (Use and Access) Act 2025 amendments to UK GDPR take effect

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduced amendments to the UK GDPR framework. These regulations bring consequential changes to align UK GDPR with the new Data (Use and Access) Act 2025 and establish transitional provisions for compliance. Organizations processing personal data in the UK must review how these amendments affect their data processing activities and compliance timelines.

What changed

  • The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduced amendments to UK GDPR, effective 23 June 2026
  • Transitional provisions establish timelines for implementation and compliance with the new framework
  • Amendments align UK GDPR with the broader data governance regime established by the Data (Use and Access) Act 2025

Who is affected

Organizations processing personal data in the UK, including controllers and processors of all sizes and sectors, particularly those affected by the new data use and access rights provisions

Summary generated by a language model; the official text prevails. Not legal advice.