Data Protection Act 2018 amended by The Data (Use and Access) Act 2025 Consequential Amendments Regulations 2026

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 Consequential Amendments Regulations 2026 amends the Data Protection Act 2018 to address interactions with the new data access and use framework. These amendments ensure consistency between data protection requirements and the new regulatory regime for data use and access. Organisations must review how their data protection practices align with both the updated DPA 2018 and the new Act's requirements.

What changed

• The Data Protection Act 2018 is amended to accommodate provisions introduced by The Data (Use and Access) Act 2025, reflecting the new regulatory framework for data access and use.
• Transitional provisions are established to manage the transition period between the existing data protection regime and the new data use and access framework.
• References and definitions within the DPA 2018 are updated to align with terminology and concepts introduced in The Data (Use and Access) Act 2025.

Who is affected

Organisations operating in the UK that process personal data and are subject to the Data Protection Act 2018 and UK GDPR, including private sector data controllers and processors, public authorities, and data processors handling personal data under the new data access and use regime.

Summary generated by a language model; the official text prevails. Not legal advice.