United Kingdom: Data (Use and Access) Act 2025 (Commencement No. 6 and Transitional and Saving Provisions) Regulations 2026 including data protection authority governance enter into force

On 5 February 2026, the Data (Use and Access) Act 2025 (Commencement No. 6 and Transitional and Saving Provisions) Regulations 2026 (2026 No. 82 (C. 10)) brought a set of provisions from the Data (Use and Access) Act 2025 into force. The commencement is part of stage 3 of the government's four-stage implementation plan for the Act, and includes changes to the existing data protection framework. Specifically, the provisions coming into force make changes to the Information Commissioner's investigatory and enforcement powers under the Data Protection Act 2018, giving the Commissioner the power to require controllers or processors to commission a third-party report on a relevant matter. The Commissioner will also be able to require controllers or processors to attend interviews as part of an investigation.