The Data (Use and Access) Act 2025 amends UK GDPR to align with data access requirements

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduce consequential amendments to UK GDPR. These amendments align GDPR requirements with the new data access and use framework established by the Data (Use and Access) Act 2025, affecting how organisations handle data subject rights and access mechanisms under UK data protection law.

What changed

• The regulations introduce consequential amendments to UK GDPR to align it with provisions of the Data (Use and Access) Act 2025
• Transitional provisions are established to manage the implementation period and ensure compliance with both the amended GDPR and the new data access framework
• The amendments affect the practical application of data subject rights under UK GDPR in relation to the new data access and use regime

Who is affected

Organisations in the United Kingdom processing personal data under UK GDPR; data subjects exercising rights under UK GDPR; supervisory authorities responsible for data protection enforcement in the UK

Summary generated by a language model; the official text prevails. Not legal advice.