UK Data (Use and Access) Act 2025

The UK Data (Use and Access) Act 2025 (DUAA) marks a significant legislative shift in the UK’s approach to data privacy, digital services and information governance. Receiving Royal Assent on June 19, 2025, the Act introduces wide-ranging reforms that modify but do not replace existing data frameworks like the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR) 2003. Its aim is multifold: to simplify compliance for organisations, encourage responsible innovation, support law enforcement, enable digital service growth and preserve high data protection standards.