Data (Use and Access) Act 2025 brings consequential amendments to Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026, effective 23 June 2026, brings consequential amendments to the Data Protection Act 2018. These amendments reflect integration of new data access and use requirements into the existing UK data protection framework. Organisations subject to UK GDPR and DPA 2018 obligations must review how the new amendments affect their data governance policies and compliance procedures.

What changed

• The Data (Use and Access) Act 2025 introduces consequential amendments to the Data Protection Act 2018 through Regulations 2026, effective 23 June 2026, requiring organisations to align their data protection practices with new data use and access requirements.
• Transitional provisions are established to allow organisations time to implement necessary changes to their data handling procedures and systems to comply with the amended DPA 2018 framework.
• The amendments integrate data access and use obligations into the existing Data Protection Act 2018 structure, potentially affecting how organisations document, process, and grant access to personal data.

Who is affected

All organisations processing personal data under UK GDPR and Data Protection Act 2018 in the United Kingdom, including data controllers and data processors across all sectors and sizes.

Summary generated by a language model; the official text prevails. Not legal advice.