Data (Use and Access) Act 2025 introduces consequential amendments to Data Protection Act 2018
Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018
The Data (Use and Access) Act 2025 has introduced consequential amendments to the Data Protection Act 2018 through regulations that came into force in 2026. These amendments align UK data protection obligations with new data use and access frameworks established under the 2025 Act. Organizations subject to UK GDPR and the Data Protection Act 2018 must review and update their data handling practices, policies, and procedures to comply with the modified requirements. Transitional provisions allow time for implementation, but compliance deadlines should be verified against the specific regulatory timeline.
What changed
- The Data (Use and Access) Act 2025 introduces amendments affecting the scope and application of the Data Protection Act 2018
- Transitional provisions establish compliance timelines for organizations to adapt their data protection frameworks to accommodate new data use and access rights
- Modified provisions may affect how organizations respond to data subject rights requests and manage data access under the new Act
Who is affected
All organizations handling personal data subject to UK GDPR and the Data Protection Act 2018 in the United Kingdom, including private sector enterprises, public authorities, and data processors.
Summary generated by a language model; the official text prevails. Not legal advice.