The Data (Use and Access) Act 2025 introduces consequential amendments to Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 has introduced consequential amendments to the Data Protection Act 2018 through regulations that came into effect on 23 June 2026. These amendments align data protection obligations with the new framework for data use and access rights. Organisations subject to UK GDPR and the Data Protection Act 2018 must review their compliance procedures to account for the new provisions and any transitional measures that may apply during the implementation period.

What changed

• The Data (Use and Access) Act 2025 introduces legislative amendments to the Data Protection Act 2018, effective 23 June 2026, establishing new rules for data use and access that complement existing data protection requirements
• New provisions under the consequential amendments may affect how organisations handle data subject rights, data processing activities, and access to personal data, requiring updates to compliance frameworks
• Transitional provisions are included in the 2026 Regulations to manage the shift from previous rules to the new framework, with specific timelines for organisations to adjust their operations

Who is affected

All organisations processing personal data under UK GDPR and the Data Protection Act 2018 in the United Kingdom, including controllers and processors, regardless of size or sector

Summary generated by a language model; the official text prevails. Not legal advice.