Data (Use and Access) Act 2025 amends UK GDPR requirements for data subject rights and processing

Original title: The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 amends the UK GDPR to align with new data access and use requirements introduced by the 2025 Act. Organizations must review how they exercise data subject rights, handle consent and legitimate interest assessments, and maintain transparency with individuals regarding data processing. The regulations include transitional provisions allowing time for compliance with the modified GDPR obligations.

Who is affected

Any organization processing personal data in the UK, including data controllers and processors across all sectors subject to UK GDPR compliance obligations

Summary generated by a language model; the official text prevails. Not legal advice.