Digital Policy Alert logo

United Kingdom: Legal confidentiality exemption in Data (Use and Access) Act enter into force

Policy overview

Description

Legal confidentiality exemption in Data (Use and Access) Act enter into force

On 4 September 2025, a provision on legal confidentiality and data subject rights in the Data (Use and Access) Act entered into force as provided for in the Data (Use and Access) Act 2025 (Commencement No. 3 and Transitional and Saving Provisions) Regulations 2025. The newly effective Section 79 of the Act amends the Data Protection Act 2018 to exempt information subject to legal confidentiality from the data subject's right of access.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2024-10-23
under deliberation

On 23 October 2024, the Data (Use and Access) Bill was introduced to the United Kingdom’s parliamen…

2025-02-05
under deliberation

On 5 February 2025, the Data (Use and Access) Bill was passed by the House of Lords. The Bill intro…

2025-06-11
adopted

On 11 June 2025, the Data (Use and Access) Bill was adopted following its final agreement in the Ho…

2025-06-19
in force

On 19 June 2025, the Data (Use and Access) Bill, including provisions on biometric data retention e…

2025-06-19
adopted

On 19 June 2025, the Data (Use and Access) Bill received royal assent. The Bill introduces a framew…

2025-08-19
in force

On 19 August 2025, the Data (Use and Access) Bill, including provisions on law enforcement agencies…

2025-08-20
in force

On 20 August 2025, the Data (Use and Access) Bill, including provisions on overriding and data brea…

2025-09-04
in force

On 4 September 2025, a provision on legal confidentiality and data subject rights in the Data (Use …

2025-12-01
in force

On 1 December 2025, digital verification service framework in the Data (Use and Access) Act entered…

2026-02-05
in force

On 5 February 2026, data protection provisions in the Data (Use and Access) Act enter into force as…