UK Data (Use and Access) Act 2025 introduces consequential amendments to UK GDPR

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

The UK Data (Use and Access) Act 2025 has triggered consequential amendments to the UK GDPR through Regulations 2026, which came into effect on 23 June 2026. These amendments align GDPR provisions with the new data access and use framework established by the primary Act. Organizations subject to UK GDPR must review these amendments to ensure their data processing compliance practices reflect the updated regulatory requirements.

What changed

• The Data (Use and Access) Act 2025 introduces consequential amendments to UK GDPR effective 23 June 2026 through secondary legislation (SI 2026/386).
• Transitional provisions are established to manage the implementation period for affected data controllers and processors under the amended UK GDPR framework.
• The amendments align UK GDPR obligations with the data access and use rights introduced under the Data (Use and Access) Act 2025.

Who is affected

All organizations processing personal data in the UK subject to UK GDPR, including data controllers and processors of any size and sector.

Summary generated by a language model; the official text prevails. Not legal advice.