Data (Use and Access) Act 2025 introduces consequential amendments to DPA 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 brings consequential amendments to the Data Protection Act 2018 through Regulations 2026, which came into effect on 23 June 2026. These amendments introduce new data access and use rights under the 2025 Act while maintaining compliance with UK GDPR requirements. Organisations must review affected provisions of the DPA 2018 to ensure alignment with new data access obligations and transitional arrangements specified in the Regulations.

What changed

  • The Data Protection Act 2018 is amended by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026, which came into effect on 23 June 2026
  • Transitional provisions are introduced to manage the implementation of new data access and use rights alongside existing DPA 2018 obligations
  • Amendments affect how data controllers and processors must handle data access requests under both the DPA 2018 and the new Data (Use and Access) Act 2025 framework

Who is affected

All organisations in the UK subject to the Data Protection Act 2018 and UK GDPR, particularly those handling personal data that may be accessed under the new Data (Use and Access) Act 2025 provisions

Summary generated by a language model; the official text prevails. Not legal advice.