Changes to data protection legislation

Implementation date: Phased introduction until June 2026

The Data (Use and Access) Act 2025 makes changes to data protection legislation.

The Act, which received Royal Assent on 19 June 2025, amends parts of the UK General Data Protection Regulation (UK GDPR). For example, it changes when the time period for responding to data subject access requests starts to run, and how controllers should deal with data protection complaints.

Provisions in the Act will be introduced in phases between June 2025 and June 2026.