Data Protection Act 2018 amended by The Data (Use and Access) Act 2025 Consequential Amendments Regulations 2026
Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018
The Data (Use and Access) Act 2025 Consequential Amendments Regulations 2026 modifies the Data Protection Act 2018 to ensure compatibility with the new data access and use framework established under the 2025 Act. These amendments clarify how data protection obligations operate alongside new data access rights and responsibilities. Organisations handling personal data must review how these changes affect their data governance procedures, consent mechanisms, and data sharing protocols.
What changed
- The Data Protection Act 2018 is amended to accommodate consequential changes required by The Data (Use and Access) Act 2025, effective through the 2026 Regulations
- Transitional provisions are established to manage the transition from existing data protection frameworks to the new regulatory environment created by the Data (Use and Access) Act 2025
- The scope and application of data protection requirements are clarified in relation to new data access and use rights introduced under the 2025 Act
Who is affected
UK organisations subject to the Data Protection Act 2018 and UK GDPR, particularly those that handle personal data and may need to provide data access under the new Data (Use and Access) Act 2025 framework. This affects data controllers, processors, and organisations operating in regulated sectors managing personal information.
Summary generated by a language model; the official text prevails. Not legal advice.