The Data Use and Access Act 2025 introduces a series of targeted updates to UK data protection law, reforming the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.
While the fundamental principles and concepts under UK data protection law aren't changing, the changes aim to promote innovation and address advancements in technology, bringing greater clarity to areas such as legitimate interests, purpose limitation, and scientific research.
The act also makes practical changes to the handling of subject access requests, international data transfers, and cookie compliance, all of which organisations will need to understand and prepare for.
Our latest data protection webinar provides a clear summary of the key reforms, what they mean in practice and the timings to be aware of.
