United Kingdom: Data protection regulation in Data (Use and Access) Bill
Progress
Scope
Timeline of events
Data protection regulation provisions in Data (Use and Access) Act enter into force
On 5 February 2026, data protection provisions in the Data (Use and Access) Act enter into force as provided for in the Data (Use and Access) Act 2025 (Commencement No. 6 and Transitional and Saving Provisions) Regulations 2026. The newly effective …
SourceDigital verification service framework in Data (Use and Access) Act enter into force
On 1 December 2025, digital verification service framework in the Data (Use and Access) Act entered into force as provided for in the Data (Use and Access) Act 2025 (Commencement No. 4) Regulations 2025. Specifically, Part 2 of the Act took effect, …
SourceLegal confidentiality exemption in Data (Use and Access) Act enter into force
On 4 September 2025, a provision on legal confidentiality and data subject rights in the Data (Use and Access) Act entered into force as provided for in the Data (Use and Access) Act 2025 (Commencement No. 3 and Transitional and Saving Provisions) R…
SourceData (Use and Access) Bill, including provisions on overriding and data breach notification entered into force
On 20 August 2025, the Data (Use and Access) Bill, including provisions on overriding and data breach notification entered into force. The Bill applies to all data controllers, processors, and electronic communications service providers handling per…
SourceData (Use and Access) Bill, including provisions on law enforcement agencies processing personal data
On 19 August 2025, the Data (Use and Access) Bill, including provisions on law enforcement agencies processing personal data entered into force. The Bill introduces formal consent requirements for data processing. It provides that controllers must d…
SourceData (Use and Access) Bill, including provisions on biometric data retention entered into force
On 19 June 2025, the Data (Use and Access) Bill, including provisions on biometric data retention entered into force. The Bill applies to law enforcement authorities, overseas agencies, and data controllers under United Kingdom's General Data Protec…
SourceData (Use and Access) Bill including data protection regulation received royal assent
On 19 June 2025, the Data (Use and Access) Bill received royal assent. The Bill introduces a framework to regulate the access, sharing, and protection of customer and business data across various sectors. The Bill empowers the Secretary of State and…
SourceData (Use and Access) Bill including data protection regulation was adopted by House of Lords
On 11 June 2025, the Data (Use and Access) Bill was adopted following its final agreement in the House of Lords. The Bill introduces a framework to regulate the access, sharing, and protection of customer and business data across various sectors. Th…
SourceData (Use and Access) Bill including data protection regulation was passed by House of Lords (Bill 40 of 2024–25)
On 5 February 2025, the Data (Use and Access) Bill was passed by the House of Lords. The Bill introduces a framework to regulate the access, sharing, and protection of customer and business data across various sectors. The Bill empowers the Secretar…
SourceIntroduced Data (Use and Access) Bill including data protection regulation
On 23 October 2024, the Data (Use and Access) Bill was introduced to the United Kingdom’s parliament. The Bill introduces a framework to regulate the access, sharing, and protection of customer and business data across various sectors. The Bill empo…
Source