Data (Use and Access) Act 2025 amendments affect Data Protection Act 2018 compliance

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 modify how the Data Protection Act 2018 applies in the UK. These changes establish a transitional framework as the new Act comes into force, affecting how data controllers and processors must manage their compliance obligations. Organisations should review their data governance practices to align with both the existing DPA 2018 requirements and the new transitional provisions introduced by these regulations.

What changed

• The Data (Use and Access) Act 2025 introduces consequential amendments to the Data Protection Act 2018, modifying its application and enforcement provisions.
• Transitional provisions are established to manage the overlap between DPA 2018 and the new Data (Use and Access) Act 2025 during the transition period.
• Specific provisions of the DPA 2018 are amended to align with the new regulatory framework for data use and access rights.

Who is affected

All organisations processing personal data in the UK, including data controllers and processors covered by the Data Protection Act 2018, with particular impact on those managing data use and access requests under the new regime.

Summary generated by a language model; the official text prevails. Not legal advice.