The Data (Use and Access) Act 2025 amends UK GDPR requirements for data subject rights and processing transparency

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

The Data (Use and Access) Act 2025 triggered consequential amendments to the UK GDPR through regulations that came into effect on 23 June 2026. These amendments align UK GDPR requirements with the new data access and use regime established by the Act. Organizations subject to UK GDPR must review and update their processes for exercising data subject rights, maintaining processing records, and providing transparency information to align with the amended obligations.

What changed

• The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 came into effect on 23 June 2026, introducing amendments to UK GDPR to reflect changes in the data protection framework.
• Consequential amendments modify provisions related to data subject rights and the exercise of those rights under UK GDPR.
• Amendments affect transparency and processing information requirements for controllers and processors under UK GDPR.
• Transitional provisions establish rules for how the amended requirements apply during the transition period.

Who is affected

All organizations processing personal data under UK GDPR, including controllers, processors, and entities exercising data subject rights in the United Kingdom.

Summary generated by a language model; the official text prevails. Not legal advice.