Data (Use and Access) Act 2025 brings consequential amendments to Data Protection Act 2018
Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018
The Data (Use and Access) Act 2025 Regulations 2026 introduce consequential amendments to the Data Protection Act 2018, effective from 23 June 2026. These amendments align data protection requirements with the new data access and use framework established by the 2025 Act. Organisations subject to UK GDPR and the DPA 2018 must review their compliance procedures to accommodate the amended provisions and understand any transitional arrangements that may apply during the implementation period.
What changed
- The Data (Use and Access) Act 2025 introduces consequential amendments to the Data Protection Act 2018, with transitional provisions to manage the transition between the old and new regulatory framework
- Amendments affect how data controllers and processors must operate under the updated DPA 2018 requirements aligned with the new data access and use regime
- Transitional provisions outline the timeline and conditions for moving from existing obligations under DPA 2018 to the amended requirements
- The amendments come into force on 23 June 2026, providing a specific implementation date for affected organisations
Who is affected
All organisations operating in the UK that are subject to the Data Protection Act 2018 and UK GDPR, including data controllers, data processors, and entities handling personal data. Document does not specify sectoral limitations.
Summary generated by a language model; the official text prevails. Not legal advice.