Description

Data (Use and Access) Bill, including provisions on law enforcement agencies processing personal data

On 19 August 2025, the Data (Use and Access) Bill, including provisions on law enforcement agencies processing personal data entered into force. The Bill introduces formal consent requirements for data processing. It provides that controllers must demonstrate data subjects consented to processing and that consent requests must be clearly distinguishable in documents. It also provides that data subjects can withdraw consent at any time. It also mandates that controllers must inform subjects of withdrawal rights before obtaining consent.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2024-10-23
under deliberation

On 23 October 2024, the Data (Use and Access) Bill was introduced to the United Kingdom’s parliamen…

2025-02-05
under deliberation

On 5 February 2025, the Data (Use and Access) Bill was passed by the House of Lords. The Bill intro…

2025-06-11
adopted

On 11 June 2025, the Data (Use and Access) Bill was adopted following its final agreement in the Ho…

2025-06-19
in force

On 19 June 2025, the Data (Use and Access) Bill, including provisions on biometric data retention e…

2025-06-19
adopted

On 19 June 2025, the Data (Use and Access) Bill received royal assent. The Bill introduces a framew…

2025-08-19
in force

On 19 August 2025, the Data (Use and Access) Bill, including provisions on law enforcement agencies…

2025-08-20
in force

On 20 August 2025, the Data (Use and Access) Bill, including provisions on overriding and data brea…