Data Protection Act 2018 amended by The Data (Use and Access) Act 2025 consequential regulations

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 bring consequential amendments to the Data Protection Act 2018, effective from 23 June 2026. These amendments align the Data Protection Act 2018 with the new data use and access framework introduced by the 2025 Act. Organisations subject to UK data protection requirements will need to review and update their compliance procedures to account for the modified provisions. The regulations include transitional provisions to facilitate the shift to the new regulatory framework.

What changed

• The Data Protection Act 2018 is amended by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 to reflect the new data use and access regime introduced by the 2025 Act. The specific amendments made to the 2018 Act are set out in the Regulations, which came into effect on 23 June 2026.
• Transitional provisions are included in the Regulations to manage the transition from the previous data protection framework to the framework modified by these amendments.

Who is affected

UK organisations and individuals subject to UK data protection law, including entities handling personal data under the UK GDPR and the Data Protection Act 2018. All controllers and processors processing personal data in or affecting the UK are affected by these amendments.

Summary generated by a language model; the official text prevails. Not legal advice.