Data (Use and Access) Act 2025 introduces consequential amendments to Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 brings consequential amendments to the Data Protection Act 2018, effective from the regulations published in 2026. These amendments align data protection requirements with the new data access and use regime introduced by the 2025 Act. Organizations subject to UK data protection obligations must review how these amendments affect their data handling procedures, consent mechanisms, and compliance frameworks.

What changed

  • The Data (Use and Access) Act 2025 introduces consequential amendments to the Data Protection Act 2018, modifying its application and requirements as specified in The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026.
  • Transitional provisions are established to manage the implementation period between the entry into force of the Data (Use and Access) Act 2025 and full compliance with amended Data Protection Act 2018 requirements.
  • The amendments align the Data Protection Act 2018 with new data access and use principles introduced by the 2025 Act, potentially affecting data subject rights, controller obligations, and data processing lawfulness.

Who is affected

Organizations in the UK subject to the Data Protection Act 2018 and UK GDPR, including data controllers and processors handling personal data, particularly those affected by the new data access and use regime introduced by the 2025 Act.

Summary generated by a language model; the official text prevails. Not legal advice.