Data Protection Act 2018 consequential amendments from Data (Use and Access) Act 2025 Regulations 2026 take effect

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 have come into force, amending the Data Protection Act 2018. These changes align UK data protection law with new data access and use provisions. Organisations subject to DPA 2018 must review their compliance obligations, as the amendments modify specific provisions affecting data processing practices, data subject rights, or regulatory oversight. Transitional provisions apply to help organisations transition to the new requirements.

What changed

• The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 introduces amendments to the Data Protection Act 2018 as a consequence of new legislation on data use and access rights.
• Transitional provisions are included to allow organisations time to adjust their operations and compliance measures to meet the amended requirements.
• The regulations affect specific sections of the Data Protection Act 2018, with the amendments applying from the date the regulations came into force on 23 June 2026.
• Organisations must ensure their data processing activities, policies, and procedures comply with the amended provisions of the Data Protection Act 2018.

Who is affected

Organisations and data controllers subject to the Data Protection Act 2018 in the United Kingdom, including public and private sector entities processing personal data.

Summary generated by a language model; the official text prevails. Not legal advice.