The Data (Use and Access) Act 2025 amendments affect UK GDPR framework

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 came into effect, introducing consequential amendments and transitional provisions to UK GDPR (Regulation (EU) 2016/679 as retained in UK law). These regulations align the UK GDPR framework with the new Data (Use and Access) Act 2025 requirements. Organisations processing personal data in the UK must review how these amendments affect their data processing practices, compliance obligations, and any transitional arrangements that may apply.

What changed

• The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduce consequential amendments to UK GDPR, effective from 23 June 2026. The amendments align UK GDPR with the new Data (Use and Access) Act 2025 framework.
• Transitional provisions are specified within the Regulations 2026 to manage the implementation of changes to the UK GDPR framework.
• The amendments affect the application and interpretation of UK GDPR obligations for organisations subject to these regulations.

Who is affected

All organisations processing personal data in the United Kingdom under UK GDPR, including data controllers and processors across all sectors and sizes

Summary generated by a language model; the official text prevails. Not legal advice.