The Data (Use and Access) Act 2025 brings consequential amendments to Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 triggers consequential amendments to the Data Protection Act 2018 through regulations published on 23 June 2026. Organisations handling personal data must review how the amendments affect their compliance obligations under UK GDPR and the Data Protection Act 2018, particularly regarding data access rights, use conditions, and transitional arrangements. The regulations establish a transition period for implementation and define how existing data protection requirements interact with new data use provisions.

What changed

• The Data Protection Act 2018 is amended to reflect the data access and use framework established by The Data (Use and Access) Act 2025
• Consequential amendments align definitions, procedures and enforcement mechanisms between the Data Protection Act 2018 and the new data access legislation
• Transitional provisions establish implementation timelines for affected organisations to comply with amended requirements
• The amendments clarify interaction between UK GDPR, the Data Protection Act 2018, and new data access rights introduced by the 2025 Act

Who is affected

All organisations processing personal data in the UK under UK GDPR and the Data Protection Act 2018, particularly those providing data access services or subject to data use restrictions under the new 2025 Act framework

Summary generated by a language model; the official text prevails. Not legal advice.