Data (Use and Access) Act 2025 amendments modify UK GDPR requirements

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

The Data (Use and Access) Act 2025 has triggered consequential amendments to the UK General Data Protection Regulation through the 2026 Regulations, which came into effect on 23 June 2026. These amendments update specific provisions of the GDPR as it applies in the United Kingdom. Organisations processing personal data must review which GDPR requirements have been modified to ensure continued compliance with the updated legal framework.

Who is affected

All organisations processing personal data in or relating to the United Kingdom, including UK-based and international data controllers and processors operating under UK GDPR.

Summary generated by a language model; the official text prevails. Not legal advice.