The Data (Use and Access) Act 2025 introduces consequential amendments to Data Protection Act 2018
Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018
The Data (Use and Access) Act 2025 has triggered consequential amendments to the Data Protection Act 2018, which came into effect on 23 June 2026 through the 2026 Regulations. Organisations subject to UK GDPR and the Data Protection Act 2018 must review the legislative changes to understand new obligations and any transitional arrangements that may apply to their data processing activities. The amendments align data protection requirements with the new data access and use framework established by the 2025 Act.
What changed
- The Data Protection Act 2018 has been amended by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026, effective from 23 June 2026
- Transitional provisions have been introduced to manage the implementation of changes resulting from the 2025 Act
- The regulatory amendments establish connections between the new Data (Use and Access) Act 2025 framework and existing data protection obligations under the Data Protection Act 2018
Who is affected
All UK organisations subject to the Data Protection Act 2018 and UK GDPR, particularly those handling personal data subject to the new Data (Use and Access) Act 2025 framework
Summary generated by a language model; the official text prevails. Not legal advice.