The Data (Use and Access) Act 2025 introduces consequential amendments to Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduces amendments to the Data Protection Act 2018 to align it with the new Data Use and Access framework. These amendments ensure consistency between data protection requirements and the new data access and portability provisions introduced by the 2025 Act. Organisations subject to UK GDPR must review their data handling procedures and ensure compliance with both the updated DPA 2018 and the transitional provisions during the implementation period.

What changed

  • The Data Protection Act 2018 is amended to reflect the requirements and definitions introduced by The Data (Use and Access) Act 2025
  • Transitional provisions are established to manage the implementation period and ensure organisations have time to adapt their processes to comply with the new framework
  • Consequential amendments ensure alignment between data protection obligations under UK GDPR and the new data access and portability requirements introduced by the 2025 Act

Who is affected

All organisations processing personal data in the UK subject to UK GDPR, including data controllers and data processors of all sizes operating in or serving UK individuals

Summary generated by a language model; the official text prevails. Not legal advice.