normdiff

The Data (Use and Access) Act 2025 amends UK GDPR with consequential provisions and transitional rules

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduces amendments to the UK GDPR (Regulation (EU) 2016/679 as retained in UK law) alongside transitional provisions. These changes align UK data protection law with new requirements under the Data (Use and Access) Act 2025. Organizations subject to UK GDPR must review how these consequential amendments affect their data processing obligations, particularly regarding any new compliance timelines established in the transitional provisions.

What changed

  • The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 makes amendments to the UK GDPR to reflect changes introduced by the Data (Use and Access) Act 2025.
  • Transitional provisions are introduced to establish implementation timelines for the consequential amendments to the UK GDPR.
  • The regulations provide a framework for how existing data processing activities must be brought into compliance with the amended UK GDPR requirements.
  • The amendments have EEA relevance, indicating potential coordination with data protection frameworks in the European Economic Area.

Who is affected

All organizations in the UK and those processing personal data of UK residents, including controllers and processors across all sectors subject to UK GDPR. The EEA relevance indicates potential effects on cross-border data flows between the UK and EEA states.

Summary generated by a language model; the official text prevails. Not legal advice.

More changes in GDPR