Data (Use and Access) Act 2025 introduces consequential amendments to Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 have come into effect, introducing consequential amendments to the Data Protection Act 2018. These amendments align data protection requirements with the new data access and use framework established by the 2025 Act. Organisations subject to the Data Protection Act 2018 must ensure compliance with the amended provisions and any applicable transitional arrangements during the implementation period. The changes affect how data protection obligations interact with the expanded data access rights introduced by the 2025 Act.

What changed

• The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduces consequential amendments to the Data Protection Act 2018, effective 23 June 2026. The regulation modifies specific sections of the 2018 Act to ensure compatibility with the new data access and use framework.
• Transitional provisions are included in the regulations to manage the implementation period and allow organisations time to adjust their data protection practices to align with the amended requirements.
• The amendments ensure that data protection obligations under the 2018 Act are coordinated with data access rights introduced by the Data (Use and Access) Act 2025, preventing conflicts between the two regimes.
• Organisations previously operating solely under the Data Protection Act 2018 may now need to consider how their data processing practices interact with new data access and use rights granted to other parties under the 2025 Act.

Who is affected

All organisations in the UK subject to the Data Protection Act 2018 and handling personal data, particularly those in sectors where data access rights under the Data (Use and Access) Act 2025 may apply. Data controllers and data processors handling UK personal data are directly affected.

Summary generated by a language model; the official text prevails. Not legal advice.