United Kingdom: Data (Use and Access) Act 2025 (Commencement No. 1) Regulations 2025 including data protection authority governance were adopted by Minister of State

On 21 July 2025, the Minister of State at the Department for Science, Innovation and Technology adopted the Data (Use and Access) Act 2025 (Commencement No. 1) Regulations 2025 (S.I. 2025 No. 904 (C. 40)), bringing into force on 20 August 2025 selected provisions of the Act as part of Stage 1 of the government’s phased implementation plan. The Regulations commence Part 1 of the Act, establishing the legal framework for access to customer and business data, including provisions enabling the Secretary of State and the Treasury to make regulations governing data handling obligations, and the right of customers or authorised persons to request access to their data. Part 5 provisions commenced include duties of the Information Commissioner under section 91, annual reporting on regulatory action under section 102, and performance analysis obligations under section 95, forming the basis for oversight and accountability mechanisms under the Act. The commencement also includes provisions relating to the Information Commission in Part 6 and reporting requirements on copyright and artificial intelligence systems under section 136 in Part 7.