On 19 August 2025, the Data (Use and Access) Bill, including provisions on law enforcement agencies processing personal data entered into force. The Bill introduces formal consent requirements for data processing. It provides that controllers must demonstrate data subjects consented to processing and that consent requests must be clearly distinguishable in documents. It also provides that data subjects can withdraw consent at any time. It also mandates that controllers must inform subjects of withdrawal rights before obtaining consent.
Original source