The Data (Use and Access) Act 2025 amends UK GDPR definitions and processing requirements
Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)
The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 makes consequential amendments to the UK GDPR following the implementation of the Data (Use and Access) Act 2025. The amendments modify core GDPR definitions, processing lawfulness conditions, and the exercise of data subject rights. Organizations processing personal data in the UK must review how these amendments affect their lawful basis requirements, consent mechanisms, and obligations regarding data access and use.
What changed
- Amendments to GDPR definitions and core concepts relating to personal data processing under the new data access and use framework introduced by the Data (Use and Access) Act 2025
- Modifications to lawful basis requirements and processing conditions, including changes to how organizations may rely on consent and other legal grounds for processing personal data
- Changes to mechanisms for exercising data subject rights, including rights of access, rectification, and erasure in light of the new data access framework
- Transitional provisions establishing timelines and requirements for compliance with the amended GDPR provisions
- Updates to UK GDPR provisions affecting how data controllers and processors must document and demonstrate compliance with processing lawfulness requirements
Who is affected
All organizations processing personal data of UK residents; data controllers and processors subject to UK GDPR; entities subject to the new Data (Use and Access) Act 2025 framework
Summary generated by a language model; the official text prevails. Not legal advice.