United Kingdom: Data (Use and Access) Bill, including provisions on biometric data retention entered into force

On 19 June 2025, the Data (Use and Access) Bill, including provisions on biometric data retention entered into force. The Bill applies to law enforcement authorities, overseas agencies, and data controllers under United Kingdom's General Data Protection Regulation frameworks. The Bill expands biometric data retention powers by allowing authorities to retain material relating to foreign recordable-equivalent offences and permits indefinite retention of pseudonymised biometric data from overseas law enforcement authorities. The Bill also creates new retention provisions for material obtained through International Criminal Police Organisation systems until requests are cancelled and limits data subjects' access rights by requiring only reasonable and proportionate searches rather than comprehensive data retrieval.