Data (Use and Access) Act 2025 introduces consequential amendments to DPA 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 introduces consequential amendments to the Data Protection Act 2018 through the 2026 Regulations, which came into effect on 23 June 2026. These amendments align DPA 2018 with the new data access and use framework established by the 2025 Act. Organizations subject to UK GDPR and DPA 2018 must review and implement the required changes to their data governance practices to remain compliant with the updated regulatory requirements.

What changed

• The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduce amendments to the Data Protection Act 2018 to align it with the new data access and use framework.
• Transitional provisions are established to manage the implementation timeline for organizations affected by DPA 2018 amendments.
• The amendments affect how data controllers and processors must handle data access and use rights under the updated framework.

Who is affected

All organizations operating in the UK subject to the Data Protection Act 2018 and UK GDPR, including data controllers and processors handling personal data.

Summary generated by a language model; the official text prevails. Not legal advice.