United Kingdom: Data (Use and Access) Act 2025 (Commencement No. 1) Regulations 2025 including data protection authority governance enter into force

On 20 August 2025, the Data (Use and Access) Act 2025 (Commencement No. 1) Regulations 2025 (S.I. 2025 No. 904 (C. 40)) enter into force, bringing into effect a set of provisions that form Stage 1 of the government's four-stage implementation plan for the Data (Use and Access) Act 2025, which received Royal Assent on 19 June 2025. The Regulations commence Part 1 of the Act, establishing the legal framework for access to customer and business data, including provisions enabling the Secretary of State and the Treasury to make regulations governing data handling obligations, and the right of customers or authorised persons to request access to their data. Part 5 provisions commenced include duties of the Information Commissioner under section 91, annual reporting on regulatory action under section 102, and performance analysis obligations under section 95, forming the basis for oversight and accountability mechanisms under the Act. The commencement also includes provisions relating to the Information Commission in Part 6 and reporting requirements on copyright and artificial intelligence systems under section 136 in Part 7.