Data (Use and Access) Act 2025 introduces consequential amendments to Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 came into force on 23 June 2026, amending the Data Protection Act 2018 to align with new data access and use frameworks. Organisations handling personal data in the UK must review their data governance practices to ensure compliance with both the modified DPA 2018 and the new data access requirements. Transitional provisions allow a phased implementation period for affected entities to adjust their systems and procedures.

What changed

• The Data Protection Act 2018 is modified by consequential amendments from the Data (Use and Access) Act 2025 to introduce new data access and use principles
• Transitional provisions are established to allow affected organisations time to implement required changes to data handling and governance procedures
• New requirements for data access and use are introduced, which organisations must integrate into their existing data protection compliance frameworks

Who is affected

All organisations in the UK that process personal data under the Data Protection Act 2018, including public authorities, private sector entities, and data controllers/processors subject to UK GDPR and DPA 2018

Summary generated by a language model; the official text prevails. Not legal advice.