The Data (Use and Access) Act 2025 (DUAA) modernises the UK’s data protection landscape, introducing reforms to the UK GDPR, Data Protection Act 2018, and Privacy and Electronic Communications Regulations (PECR). Enacted on 19 June 2025, the Act seeks to balance data-driven innovation with continued protection of individuals’ rights and freedoms.
The DUAA clarifies data-sharing rules, streamlines compliance requirements for public authorities, and promotes responsible data use to support economic growth and scientific advancement. While the DUAA aims to simplify regulatory processes, it reinforces the need for accountability, transparency, and fairness in all data-handling activities.
For public-sector organisations, understanding the DUAA ensures policies and governance remain aligned with evolving legal obligations.
