The Data (Use and Access) Act 2025 brings consequential amendments to Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 has triggered consequential amendments to the Data Protection Act 2018, effective through Regulations 2026. Organisations subject to DPA 2018 must review how these amendments interact with their existing data protection obligations under UK GDPR and the Act. The changes may affect data handling practices, consent mechanisms, and compliance frameworks where the two regimes overlap.

What changed

• The Data Protection Act 2018 has been modified by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (SI 2026/386), with changes taking effect on 23 June 2026
• Organisations must assess how amendments under the new Data (Use and Access) Act 2025 interact with their existing Data Protection Act 2018 compliance obligations

Who is affected

Organisations in the UK subject to the Data Protection Act 2018 and UK GDPR, including data controllers and processors handling personal data

Summary generated by a language model; the official text prevails. Not legal advice.