Data (Use and Access) Act 2025 makes consequential amendments to Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 introduces consequential amendments to the Data Protection Act 2018 through the 2026 Regulations, which came into effect on 23 June 2026. Organisations handling personal data under UK GDPR must review how the new framework affects their data protection obligations and ensure compliance with any transitional measures outlined in the regulations. The amendments may impact data processing practices, consent mechanisms, and data subject rights as the legal framework evolves.

What changed

• The Data (Use and Access) Act 2025 Consequential Amendments and Transitional Provision Regulations 2026 came into effect, making changes to the Data Protection Act 2018
• Consequential amendments have been made to align the Data Protection Act 2018 with the new Data (Use and Access) Act 2025 framework
• Transitional provisions are included to manage the implementation period as organisations move to the new regulatory requirements

Who is affected

All organisations in the UK subject to UK GDPR that process personal data, including data controllers and processors across all sectors

Summary generated by a language model; the official text prevails. Not legal advice.