Data (Use and Access) Act 2025 introduces consequential amendments to Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduces consequential amendments to the Data Protection Act 2018, effective from 23 June 2026. These amendments align data protection requirements with the new data use and access framework established by the 2025 Act. Organizations subject to UK GDPR and the Data Protection Act 2018 must review the amended provisions and implement any necessary changes to their data protection practices and governance structures.

What changed

  • The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 amends the Data Protection Act 2018 with consequential amendments to align with the Data (Use and Access) Act 2025 framework.
  • Transitional provisions are introduced to manage the implementation period between the existing Data Protection Act 2018 regime and the new amended framework effective 23 June 2026.
  • UK GDPR compliance obligations are modified to account for the new data use and access framework introduced by the 2025 Act.

Who is affected

All organizations handling personal data under UK GDPR and the Data Protection Act 2018 in the United Kingdom, including data controllers and data processors across all sectors and sizes.

Summary generated by a language model; the official text prevails. Not legal advice.