Data (Use and Access) Act 2025 introduces consequential amendments to UK data protection framework

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduces amendments to the Data Protection Act 2018 effective from the date specified in the regulations. These changes align the UK data protection framework with the new data access and use regime, creating new obligations and rights for data controllers, processors, and data subjects. Organisations must review the transitional provisions to understand implementation timelines and compliance deadlines under both the existing and new frameworks.

What changed

• The Data Protection Act 2018 is amended by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 to incorporate provisions aligned with the data access and use framework introduced by the 2025 Act.
• Transitional provisions are introduced to manage the implementation period between the existing data protection regime and the new data access and use requirements, specifying how both frameworks apply during the transition.
• The regulations modify specific sections of the Data Protection Act 2018 to ensure compatibility with the new data use and access rights and obligations established under the 2025 Act.

Who is affected

All organisations processing personal data in the UK, including data controllers and processors. Data subjects exercising rights under UK GDPR and the Data Protection Act 2018 are also affected by the framework changes.</who_is_affected>

Summary generated by a language model; the official text prevails. Not legal advice.