Key provisions of Data (Use and Access) Act 2025 to come into force on 5 February 2026
The Secretary of State has made the Data (Use and Access) Act 2025 (DUAA 2025) (Commencement No 6 and Transitional and Saving Provisions) Regulations 2026, SI 2026/82, which bring the majority of the DUAA 2025’s data protection reforms into force from 5 February 2026. These regulations commence provisions relating to research and statistical purposes, consent to processing for scientific research, the lawfulness of processing, purpose limitation, data subject requests, automated decision-making, data protection by design for children, and the transfers of personal data to third countries, among others. Further provisions concerning complaints by data subjects will come into force on 19 June 2026.