Data Protection Act 2018 amended by Data (Use and Access) Act 2025 Consequential Amendments Regulations 2026

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 Consequential Amendments and Transitional Provision Regulations 2026 amend the Data Protection Act 2018 to ensure compatibility with the new data access regime established under the 2025 Act. These amendments introduce transitional provisions and modify existing DPA 2018 provisions to reflect the expanded data access rights framework. Organizations subject to UK GDPR and DPA 2018 requirements must review their data handling practices to ensure compliance with the modified obligations regarding data access and use rights.

What changed

• The Data Protection Act 2018 is amended to incorporate consequential changes arising from the Data (Use and Access) Act 2025, establishing alignment between the two legislative frameworks governing data protection and access rights in the UK.
• Transitional provisions are introduced to manage the implementation period, allowing organizations time to adjust their data governance and access control mechanisms to meet the new requirements.
• The amendments modify definitions, procedural requirements, and enforcement mechanisms within DPA 2018 to accommodate the expanded data access rights introduced by the 2025 Act.

Who is affected

All UK organizations handling personal data subject to the Data Protection Act 2018 and UK GDPR, particularly those providing data access services or managing data access requests under the new framework. This includes data controllers, data processors, and data service providers across all sectors.

Summary generated by a language model; the official text prevails. Not legal advice.