The Data (Use and Access) Act 2025 amends Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 has been enacted, requiring consequential amendments to the Data Protection Act 2018 through statutory instrument regulations effective 23 June 2026. Organizations subject to UK GDPR and the DPA 2018 must review how these amendments affect their data protection compliance obligations and policies. The transitional provisions outlined in the regulations establish the timeline for implementing these changes.

What changed

• The Data Protection Act 2018 is amended by The Data (Use and Access) Act 2025 through statutory instrument 2026/386, effective 23 June 2026.
• Consequential amendments to DPA 2018 provisions have been introduced to align with the new Data (Use and Access) Act 2025 framework.
• Transitional provisions have been established to specify implementation timelines and interim arrangements for affected provisions.
• The amendments affect how data protection obligations are interpreted and applied under UK GDPR and the DPA 2018 framework.

Who is affected

UK-based organizations and data controllers subject to UK GDPR and the Data Protection Act 2018, particularly those handling personal data in contexts regulated under the new Data (Use and Access) Act 2025.

Summary generated by a language model; the official text prevails. Not legal advice.