Data (Use and Access) Act 2025 introduces consequential amendments to Data Protection Act 2018

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 and its implementing Regulations 2026 make consequential amendments to the Data Protection Act 2018, effective from 23 June 2026. Organisations subject to UK GDPR and the DPA 2018 need to review how these amendments affect their data protection obligations and compliance frameworks. The changes include transitional provisions to facilitate the implementation of the new data access and use regime.

What changed

• The Data (Use and Access) Act 2025 introduces consequential amendments to the Data Protection Act 2018, reflecting the new regulatory framework for data use and access rights.
• Transitional provisions are established to manage the period between the entry into force of the new Act and full compliance with the amended DPA 2018 requirements.
• Organisations may need to update their data protection policies, privacy notices, and compliance procedures to align with the consequential amendments to the DPA 2018.

Who is affected

Organisations processing personal data in the UK subject to UK GDPR and the Data Protection Act 2018, including both public and private sector entities. Data controllers and processors with UK operations are directly affected.

Summary generated by a language model; the official text prevails. Not legal advice.