On 5 February 2026, provisions on new investigatory powers for the Information Commissioner in the Data (Use and Access) Act enter into force as provided for in the Data (Use and Access) Act 2025 (Commencement No. 6 and Transitional and Saving Provisions) Regulations 2026. The newly effective provisions amend the Data Protection Act 2018, giving the Commissioner the power to require controllers or processors to commission a third-party report on a relevant matter. The Commissioner will also be able to require controllers or processors to attend interviews as part of an investigation.
Original source