Severity: Medium Amendment EU Action required
The Data (Use and Access) Act 2025 introduces consequential amendments to UK GDPR
Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)
- Published
- Source: legislation.gov.uk
- Effective
- Not stated
- Deadline
- Not stated
- Framework: GDPR
- Regulation (EU) 2016/679 (as corrected 2018) source
- in 14 days
- Indicative European Parliament plenary date (first reading) for the small mid-caps omnibus, COM(2025) 501, which would raise the Article 30 records exemption to organisations under 750 employees - a forecast, not a fixed date source
Why it matters
The Data (Use and Access) Act 2025 Consequential Amendments and Transitional Provision Regulations 2026 brings changes to UK GDPR following the enactment of the Data (Use and Access) Act 2025. These amendments ensure UK GDPR aligns with the new data access and use framework established by the 2025 Act. Organizations processing personal data in the UK must review their compliance practices to accommodate the modified legal requirements.
What changed
- The Data (Use and Access) Act 2025 Consequential Amendments and Transitional Provision Regulations 2026 introduce amendments to UK GDPR effective from the regulation's commencement date (23 June 2026)
- Transitional provisions are established to manage the transition between pre-existing UK GDPR requirements and those introduced by the Data (Use and Access) Act 2025
- These consequential amendments align UK GDPR with the framework and principles introduced by the Data (Use and Access) Act 2025
Who is affected
Organizations processing personal data in the UK, including data controllers and processors, data protection officers, and compliance professionals managing UK GDPR compliance
What to do
AI-assisted summary of the official document; the official text prevails. Not legal advice.