The Data (Use and Access) Act 2025 introduces consequential amendments to Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduces amendments to the Data Protection Act 2018 to align with new data use and access mechanisms. These consequential amendments establish the legal relationship between the 2025 Act and existing data protection requirements. Organizations subject to UK GDPR must review how these amendments affect their data handling obligations and implement necessary adjustments to their data governance practices.

What changed

• The Data Protection Act 2018 is amended by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026, which came into effect on 23 June 2026, introducing new provisions relating to data use and access rights under the 2025 Act.
• Consequential amendments align the Data Protection Act 2018 with mechanisms established under the Data (Use and Access) Act 2025, affecting how data protection principles interact with new data use and access frameworks.
• Transitional provisions are established by the Regulations to ensure a smooth implementation period for organizations adapting to the interaction between existing data protection obligations and new data use and access requirements.

Who is affected

All organizations processing personal data in the UK that are subject to UK GDPR and the Data Protection Act 2018, including private sector organizations, public authorities, and data processors. The impact applies across all sectors and organization sizes operating within UK jurisdiction.

Summary generated by a language model; the official text prevails. Not legal advice.