The Data (Use and Access) Act 2025 introduces consequential amendments to the Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 has triggered consequential amendments to the Data Protection Act 2018, effective through the 2026 Regulations. This means organisations subject to UK GDPR and the Data Protection Act 2018 must review how data use, access rights, and related compliance obligations interact with the new framework. Transitional provisions establish a timeline for adapting existing data governance practices to align with both regimes.

What changed

• The Data (Use and Access) Act 2025 introduces a parallel data access and use regime that creates interface points with Data Protection Act 2018 obligations
• Consequential amendments modify how data subjects' rights under the Data Protection Act 2018 interact with new data access rights under the 2025 Act
• Transitional provisions establish timelines for organisations to align existing data protection compliance with the new data use and access framework

Who is affected

Organisations in the UK subject to UK GDPR and the Data Protection Act 2018, particularly those holding personal data that may be subject to data access requests under the new 2025 Act regime

Summary generated by a language model; the official text prevails. Not legal advice.