Digital Policy Alert logo

United Kingdom: Data (Use and Access) Bill, including provisions on law enforcement agencies processing personal data

Policy overview

Description

Data (Use and Access) Bill, including provisions on law enforcement agencies processing personal data

On 19 August 2025, the Data (Use and Access) Bill, including provisions on law enforcement agencies processing personal data entered into force. The Bill introduces formal consent requirements for data processing. It provides that controllers must d…

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2024-10-23
under deliberation

On 23 October 2024, the Data (Use and Access) Bill was introduced to the United Kingdom’s parliamen…

2025-02-05
under deliberation

On 5 February 2025, the Data (Use and Access) Bill was passed by the House of Lords. The Bill intro…

2025-06-11
adopted

On 11 June 2025, the Data (Use and Access) Bill was adopted following its final agreement in the Ho…

2025-06-19
in force

On 19 June 2025, the Data (Use and Access) Bill, including provisions on biometric data retention e…

2025-06-19
adopted

On 19 June 2025, the Data (Use and Access) Bill received royal assent. The Bill introduces a framew…

2025-08-19
in force

On 19 August 2025, the Data (Use and Access) Bill, including provisions on law enforcement agencies…

2025-08-20
in force

On 20 August 2025, the Data (Use and Access) Bill, including provisions on overriding and data brea…

2025-09-04
in force

On 4 September 2025, a provision on legal confidentiality and data subject rights in the Data (Use …

2025-12-01
in force

On 1 December 2025, digital verification service framework in the Data (Use and Access) Act entered…

2026-02-05
in force

On 5 February 2026, data protection provisions in the Data (Use and Access) Act enter into force as…