The Data (Use and Access) Act 2025 (Commencement No. 6 and Transitional and Saving Provisions) Regulations 2026 were made on 29th January 2026. They bring into force most of the amendments to the UK GDPR, PECR and the DPA 2018 made by The Data (Use and Access) Act 2025 (DUA Act).
The amendments coming into force on Thursday (5th February 2026), amongst others, cover:
- New ‘Recognised legitimate interests’
- When time starts for dealing with subject access requests
- Automated Decision Making
- Information to be provided to data subjects
- Safeguards for processing for research etc purposes
- International Data Transfers
- PECR and marketing
You can read a summary of the amendments here.
DUA Act Workshop in Birmingham (Thursday 5th February 2026)
If you are looking to implement the changes made by the DUA Act to the UK data protection regime, consider our very popular half day workshop which is running online and in Birmingham.
Revised GDPR Handbook
The newly updated UK GDPR Handbook (2nd edition) brings these developments together in one practical reference. It includes all amendments introduced by the DUA Act, with colour-coded changes for easy navigation and links to relevant recitals, ICO guidance, and caselaw that help make sense of the reforms in context. We have included relevant provisions of the amended DPA 2018 to support a deeper understanding of how the laws interact. Delegates on our future GDPR certificate courses will receive a complimentary copy of the UK GDPR Handbook as part of their course materials.
3 thoughts on “Data (Use and Access) Act: Key Data Provisions In Force on Thursday”