The Data (Use and Access) Act 2025 amends UK GDPR requirements for data subject rights and processing oversight
Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)
The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduces consequential amendments to UK GDPR effective from the coming into force of the 2025 Act. These amendments adjust the framework for data subject rights, controllers' obligations, and supervisory mechanisms to align with the new data access and use regime. Organizations must review their data processing activities to ensure compliance with modified requirements under both the 2025 Act and amended GDPR provisions. The transitional provisions establish how existing processing arrangements will be treated during the transition period.
What changed
- The Data (Use and Access) Act 2025 introduces consequential amendments to UK GDPR (Regulation (EU) 2016/679 as retained in UK law) through regulations published on 23 June 2026, creating new obligations and modifying existing data protection requirements
- Amendments modify the framework governing data subject rights and controllers' processing obligations to accommodate the data access and use regime introduced by the 2025 Act
- Transitional provisions establish the temporal application and compliance timeline for affected organizations during the transition from existing UK GDPR requirements to amended requirements
Who is affected
All organizations processing personal data in the United Kingdom, particularly those subject to UK GDPR (data controllers and processors), as well as individuals (data subjects) whose rights may be affected by the amendments to the regulatory framework
Summary generated by a language model; the official text prevails. Not legal advice.