 |
| Author Robert Harker Licence CC BY-SA 3.0 Source Wikimedia |
Shortly after EU law ceased to apply to the UK, the government of the day proposed changes to this country's data protection laws. I discussed those proposals in Dowden's Data Protection Plans on 27 Aug 2021. A consultation was launched on 10 Sept 2021, which I considered in Consultation on Changing the Data Protection Laws on 12 Sept 2021. Draft legislation was introduced on 17 June 2022, which I mentioned in The Proposed Data Reform Bill on 25 June 2022. That bill never made it past its first reading because the minister responsible for piloting it through the Commons was replaced when Liz Truss became prime minister. The new minister introduced the Data Protection and Digital Information Bill, which was more far-reaching than the Data Reform Bill (see the Data Protection and Digital Information (No 2) Bill 2022-2023). That bill fell with the Conservative government when the general election was held. One of the first acts of the incoming Labour government was to introduce the Data (Use and Access) Bill on 23 Oct 2024. That bill received royal assent on 19 June 2025.
The Data (Use and Access) Act 2025 consists of 144 sections divided into 8 Parts with 16 schedules. The Department for Science, Innovation and Technology describes the legislation as "a wide-ranging Act which includes provisions to enable the growth of digital verification services, new Smart Data schemes like Open Banking and a new National Underground Asset Register" in its Guidance. The new Act "will not replace the UK General Data Protection Regulation (“UK GDPR”), Data Protection Act 2018 or the Privacy and Electronic Communications (EC Directive) Regulations 2003, but it will make some changes to them to make the rules simpler for organisations, encourage innovation, help law enforcement agencies to tackle crime and allow responsible data-sharing while maintaining high data protection standards."
According to the Information Commissioner, the statute updates some laws about digital information matters and changes data protection laws in order to promote innovation and economic growth. Its provisions will be phased in between June 2025 and June 2026. The Department for Science, Innovation and Technology has published useful fact sheets on the UK GDPR and Data Protection Act 2018, the Information Commissioner's Office and the Privacy and Electronic Communications Regulations 2003.
Anyone wishing to discuss this article is welcome to call me on +44 (0)20 7404 5252 during UK office hours or send me a message through my contact form at any time. In subsequent articles, I shall review the Act and analyse its provisions.
