The Data (Use and Access) Act 2025 introduces consequential amendments to the Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 Consequential Amendments and Transitional Provision Regulations 2026 amend the Data Protection Act 2018 to implement consequential changes required by the new data use and access legislation. Organisations subject to UK data protection rules must review how these amendments affect their compliance obligations, data processing practices, and the scope of their lawful basis for processing. The transitional provisions establish timelines for organisations to implement required changes and adjust their policies accordingly.

What changed

• The Data Protection Act 2018 is amended by The Data (Use and Access) Act 2025 Consequential Amendments and Transitional Provision Regulations 2026 to reflect the requirements of the new Data (Use and Access) Act 2025 framework
• Specific provisions of the Data Protection Act 2018 are modified to ensure consistency with the new data use and access regime and its regulatory requirements
• Transitional provisions are established to allow affected organisations reasonable time to implement the consequential amendments and adjust their data processing systems and documentation

Who is affected

Organisations processing personal data under UK GDPR and the Data Protection Act 2018, including data controllers, data processors, and data custodians subject to UK data protection legislation. The changes affect all sectors handling personal data in the UK.

Summary generated by a language model; the official text prevails. Not legal advice.