UK data reform: What you need to know about the Data (Use and Access) Act

After an eventful three-year legislative voyage, the UK's Data (Use and Access) Act 2025 (DUA Act) received Royal Assent on 19 June 2025. While most of the changes are yet to be brought in through secondary legislation, a few limited provisions are already in force and others will come into force on 19 August 2025. The DUA Act introduces wide-ranging and significant changes. This briefing provides a general overview, act highlights, takeaways for businesses and other organisations, and a what's next timetable. In case you are only interested in certain aspects of the act we have also broken down this briefing into a series of shorter articles looking at: Framework for smart data schemes, Digital Verification Services Framework, Changes to UK data protection laws, Enforcement and regulatory engagement, Cookies, trackers and security patches and Other provisions.

Download PDF

Clifford Chance