News and views

The Data Use and Access Act 2025 has now received Royal Assent, paving the way for a new legal framework that will shape how companies access, share and use data in the UK. The Act brings practical and strategic implications for businesses across all sectors, with the aim of supporting innovation while strengthening safeguards and accountability. Organisations should be preparing now for changes that will roll out over the next 12 to 18 months.

Implementation timeline: what to expect

While the Act is now law, its provisions will come into force in phases, with some taking effect immediately. All are expected to be fully implemented by the middle of 2026. 

Between now and the end of the year, it is expected the ICO will publish new Codes of Conduct related to the Act which will contain further practical guidance on various measures.

Practical steps for companies

To get ahead of these changes, businesses should:

• Review and update internal data policies - identify any gaps or inconsistencies that need addressing
• Refresh operational procedures and workflows - map how data moves through the business and where new compliance checks may be needed
• Update contracts and agreements - review supplier and partner contracts to ensure they reflect DUAA obligations
• Revise employee training materials - ensure staff understand the practical implications of the DUAA, particularly those in data-handling roles
• Revisit cookie policies and privacy notices - check that they are consistent with the new regime
• Strengthen data transfer frameworks - review mechanisms for domestic and cross-border data transfers to ensure they meet DUAA standards
• Monitor secondary legislation and guidance - be ready to adjust measures as it develops

In summary...

Royal Assent is the starting gun, not the finish line. The real impact will be felt as the new regime comes into force over the next 12+ months. Proactive preparation now can help you minimise disruption and in some cases, capitalise on new opportunities.

How can we help?

Our dedicated 2-hour DUAA course is designed to help organisations prepare effectively and with confidence – view full details and book your place now >>