Data (Use and Access) Act 2025 brings consequential amendments to Data Protection Act 2018
Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Data Protection Act 2018
The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 amend the Data Protection Act 2018 to align with new data access and use requirements. Organisations subject to UK data protection obligations must review how these amendments affect their data handling practices, governance structures, and compliance frameworks. The regulations include transitional provisions to facilitate the shift to the new requirements.
What changed
- The Data (Use and Access) Act 2025 introduces consequential amendments to the Data Protection Act 2018, requiring alignment of existing data protection obligations with new data access and use frameworks
- Transitional provisions are included to enable organisations to implement the amended requirements within defined timeframes rather than with immediate effect
- The regulations modify specific provisions of the DPA 2018 to accommodate the data access and use regime introduced by the 2025 Act
Who is affected
All organisations processing personal data in the UK subject to the Data Protection Act 2018 and UK GDPR, including controllers and processors across all sectors and sizes. Public authorities, private enterprises, and other entities handling personal data must adjust compliance frameworks accordingly.
Summary generated by a language model; the official text prevails. Not legal advice.