The Data Use and Access Act 2025

The Data Use and Access Act 2025 (DUAA) is a significant new Act of Parliament designed to modernise the UK's approach to digital information and data governance. The changes will be phased in between June 2025 and June 2026. Its core aims are to support economic growth, enhance public services, and streamline everyday digital interactions and business compliance by fostering secure and responsible data sharing, including between consumers and third parties.

Key changes introduced by the Act include:

• Clarifying how personal information can be used for research.

• Lifting restrictions on some automated decision-making processes.

• Setting out new rules for using some cookies without consent.

• Allowing charities to send electronic mail marketing to people in certain circumstances without prior consent.

• Requiring organisations to establish a data protection complaints procedure.

• Introducing a new lawful basis: 'recognised legitimate interests'.

As these changes begin to take effect, both organisations and individuals will need to adapt to a fast-evolving digital landscape. Whether you’re a business owner, a public sector worker, or simply someone concerned about how your data is used, it’s more important than ever to stay up to date with the latest developments in data protection law. Keep an eye on official guidance and follow reliable resources, as the landscape continues to evolve. DUAA marks a major step forward in shaping a modern, responsible, and innovation-friendly approach to data in the UK—one that aims to balance economic growth, public benefit, and personal privacy in the years ahead.