Data (Use and Access) Act 2025

UK: Commencement of the Data Protection Provisions in the DUAA — DLA Piper Privacy Matters

The Commencement No. 6 Regulations brought the majority of key amendments to the UK's data protection and e-privacy framework into force on 5 February 2026; the staggered approach drew criticism for giving organisations very short notice.

Key Aspects of the Data (Use and Access) Act Take Effect — Clifford Chance

Analyses the provisions activated by Commencement No. 6, covering recognised legitimate interests, research provisions, automated decision-making, international transfers, and cookie rules, with forward-looking notes on pending ICO guidance.

DUAA: Commencement No. 6 Regulations Are Now in Force — Womble Bond Dickinson

The Commencement No. 6 Regulations activate the bulk of DUAA provisions amending UK GDPR, PECR and the DPA 2018; the ICO has clarified it will apply the law as it stood at the time of any infringement when assessing enforcement.

DUAA 2025: Commencement Dates and Planned Guidance for 2026 — Kennedys Law

Summarises all five commencement regulations made to date, the ICO's planned guidance timetable, and key milestones anticipated for 2026, including the complaints handling duty deadline of June 2026.

European Commission Renews UK Data Adequacy Decisions (December 2025)

On 19 December 2025, the European Commission announced the renewal of the two UK adequacy decisions originally adopted in 2021, reaffirming that personal data may continue to move freely between the EEA and the UK.

Press notices: Data (Use and Access) Bill: call for evidence