Data Protection Act 2018 amended by Data (Use and Access) Act 2025 consequential regulations

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 came into effect on 23 June 2026, making consequential amendments to the Data Protection Act 2018 to align it with the new data access and use regime. Organizations subject to UK data protection law must review the amended provisions to ensure their data processing practices remain compliant with updated requirements. The regulations introduce transitional provisions to facilitate the transition from existing data governance frameworks to the new regime.

What changed

  • The Data Protection Act 2018 has been amended by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 with effect from 23 June 2026 to reflect changes introduced by the Data (Use and Access) Act 2025
  • Consequential amendments align the Data Protection Act 2018 with the new data access and use framework established by the 2025 Act
  • Transitional provisions have been introduced to manage the move from existing data governance arrangements to the new regime
  • Organizations must ensure their data processing operations comply with both the amended Data Protection Act 2018 and the new Data (Use and Access) Act 2025 framework

Who is affected

Organizations in the United Kingdom subject to data protection law, including private sector companies, public authorities, and other entities processing personal data. The amendments apply across all sectors operating under UK data protection requirements.

Summary generated by a language model; the official text prevails. Not legal advice.