Data (Use and Access) Act 2025 introduces consequential amendments to Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 has come into effect, introducing amendments to the Data Protection Act 2018. These consequential changes align the 2018 Act with the new data access and use framework established by the 2025 Act. Organisations handling personal data under UK GDPR must review the amended provisions to understand how the new data use framework interacts with their existing data protection obligations. The regulations include transitional provisions to facilitate compliance during the implementation period.

What changed

• The Data Protection Act 2018 has been amended to incorporate consequential changes required by the Data (Use and Access) Act 2025, effective from 23 June 2026.
• Transitional provisions have been established to support organisations in adapting to the amended framework during the implementation period.
• The amendments align UK data protection requirements with the new data use and access regime introduced by the 2025 Act.

Who is affected

All organisations processing personal data under UK GDPR in the United Kingdom, including data controllers and processors across all sectors and sizes.

Summary generated by a language model; the official text prevails. Not legal advice.