Data (Use and Access) Act 2025 amends UK GDPR with consequential provisions
Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)
The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 amend UK GDPR to align it with the new Data (Use and Access) Act 2025. The regulations introduce consequential amendments to ensure GDPR compliance is consistent with the new data access and use regime. Transitional provisions are included to facilitate a phased implementation approach for organizations subject to both frameworks.
What changed
- The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduce amendments to UK GDPR effective from 23 June 2026, with specific consequential amendments and transitional provisions detailed in the full legislation (SI 2026/386)
- Consequential amendments align UK GDPR requirements with provisions of the Data (Use and Access) Act 2025 to ensure consistency between the two data protection and access regimes
- Transitional provisions are specified to allow organizations time to comply with amended requirements where both acts apply simultaneously
Who is affected
All organizations processing personal data in the UK and subject to UK GDPR, particularly those that will also be subject to the Data (Use and Access) Act 2025 regime
Summary generated by a language model; the official text prevails. Not legal advice.