Updated to reflect that restrictions on automated decision-making are removed by the Data (Use and Access) Act 2025 from 5 February 2026, but that employers must still have safeguards in place.
Updated to reflect that restrictions on automated decision-making are removed by the Data (Use and Access) Act 2025 from 5 February 2026, but that employers must still have safeguards in place.
Updated to reflect the provisions of the Data (Use and Access) Act 2025 in force from 5 February 2026. In particular, the relaxation of rules on automated decision-making.
Updated to reflect new rules on time limits for responding to data subject access requests, in place from 5 February 2026 under the Data (Use and Access) Act 2025.
Updated to reflect the addition of recognised legitimate interests as a lawful ground for processing data introduced under the Data (Use and Access) Act 2025, in force from 5 February 2026.