UK Data (Use and Access) Act 2025

2025 UK legislation amending the UK GDPR framework.

Status

Legal status: In force in stages (Royal Assent June 19, 2025; stage 1 August 20, 2025; Part 5 data protection provisions February 5, 2026; complaints provisions (s. 103) commenced June 19, 2026, from which controllers must operate a compliant data-protection complaints process under ICO guidance (final guidance February 12, 2026, updated May 8, 2026). Under regulation 7 of S.I. 2026/82, the acknowledgment and response duties in DPA 2018 section 164A(3) and (4) apply only to complaints received by the controller on or after June 19, 2026.)
Allegation or finding: Operative law
Applicability: Organizations subject to the UK data protection framework
Enforceability: Binding on parties within scope
Law checked through: October 12, 2026
Citation: Data (Use and Access) Act 2025
Source: Data (Use and Access) Act 2025 and its commencement regulations