Data (Use and Access) Act 2025 introduces consequential amendments to Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 implements consequential changes to the Data Protection Act 2018 effective from 23 June 2026. Organisations subject to UK GDPR and DPA 2018 requirements must review how these amendments affect their data protection obligations and compliance frameworks. The transitional provisions establish timelines for implementing the new requirements across data handling and processing activities.

What changed

  • The Data Protection Act 2018 is amended by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026, introducing changes to accommodate the new Data Use and Access framework
  • Consequential amendments modify DPA 2018 provisions to ensure consistency with the Data (Use and Access) Act 2025
  • Transitional provisions establish timelines and procedures for organisations to adapt their data protection practices to the new regulatory requirements

Who is affected

Organisations in the UK subject to UK GDPR and Data Protection Act 2018, including data controllers and processors handling personal data. The regulations apply across all sectors and organisation sizes operating in or affecting UK residents.

Summary generated by a language model; the official text prevails. Not legal advice.