All instruments Bill United Kingdom: UK Data (Use and Access) Act 2025 No summary is recorded for this instrument. Adopted Not yet reviewed English Open the source (opens in a new tab) Suggest a correction Details Full text Details Identity Title UK Data (Use and Access) Act 2025 Original title Not recorded Instrument ID uk-data-use-and-access-act-2025 Type Bill Status Adopted Jurisdiction and publisher Jurisdiction United Kingdom Publisher Not recorded Language English Dates and versions Date June 19, 2025 Versions Enacted · June 19, 2025 Classification Policy areas Not recorded Source Source URL https://bills-api.parliament.uk/api/v1/Publications/58183/Documents/5781/Download Retrieved August 29, 2026 License Unknown. Follow the publisher’s terms. Access note Not recorded Full text 445,982 characters Original text, English · 445,982 characters in 3 parts Load the full text Download as .txt Jump to part Jump to part Part 1 of 3Part 2 of 3Part 3 of 3 Outline (135 headings) Part 1: Access to customer data and business data Part 2: Digital verification services Part 3: National Underground Asset Register Part 4: Registers of births and deaths Part 5: Data protection and privacy Chapter 1: Data protection Section 85 : consequential provision Chapter 2: Privacy and electronic communications Part 6: The Information Commission Part 7: Other provision about use of, or access to, data Part 8: Final provisions Schedule 1: National Underground Asset Register (England and Wales): monetary penalties Schedule 2: National Underground Asset Register (Northern Ireland): monetary penalties Schedule 3: Registers of births and deaths: minor and consequential amendments Schedule 4: Lawfulness of processing: recognised legitimate interests Schedule 5: Purpose limitation: processing to be treated as compatible with original purpose Schedule 6: Automated decision-making: minor and consequential amendments Schedule 7: Transfers of personal data to third countries etc: general processing Schedule 8: Transfers of personal data to third countries etc: law enforcement processing Schedule 9 Schedule 10: Complaints: minor and consequential amendments Schedule 11 Schedule 12 Schedule 13: Privacy and electronic communications: Commissioner’s enforcement powers Schedule 14 Schedule 15 Schedule 16: Amendments of the Energy Act 2008 Article 10 of the Perjury (Northern Ireland) Order 1979 (S.I. 1979/1714 (N.I. 19)) (false statutory declarati… Part 1 provision that is required to be reviewed by the relevant person by virtue of existing regulations und… Part 1 provision that makes, amends or revokes provision described in paragraph Part 2 of the Data (Use and Access) Act 2025 (“the DVS Section 95 applies in relation to an offence under this section as it applies in relation to an offence under… Schedule 2ZA: to, the Schedule 5A Section 166 of the New Roads and Street Works Act 1991, so far as relating to Part 3A of that Act (inserted by Schedule: to this Act inserts Article 59 Article 4 of the UK GDPR (definitions) is amended as follows. Article 23(1)(c) to (j). Article 77 (right to lodge a complaint with the Commissioner);”. Chapter 2 of this Part (principles), except for the provisions listed in subsection Chapter 3 of this Part (rights of the data subject); Chapter 5 of this Part (transfers of personal data to third countries etc), except for the provisions listed… Schedule 8 (conditions for sensitive processing). Part 4 of the 2018 Act (intelligence services processing) is amended as follows. Article 57(3) of the UK GDPR (performance of Information Commissioner’s tasks generally to be free of charge… Article 10 of the Perjury (Northern Ireland) Order 1979 (S.I. 1979/1714 (N.I. 19)) (false statutory declarati… Article 58(1)(c) and (d) and (2)(a) and (b) of the UK GDPR, Article 15 of the UK GDPR (right of access by the data subject); Article 20 of the UK GDPR (right to data portability); Schedule 15”; Chapter 6 or 8 of the UK GDPR, or Article 3 of Regulation (EEC, Euratom) No. 1182/71 of 2013 No. 211), and Schedule 1 provides for certain provisions of Parts 5 to 7 of the Data Protection Act 2018 to apply with modi… Schedule.” Schedule 12A: makes further provision about the Commission.” Section 35 of the Digital Economy Act 2017 (disclosure of information to improve public service delivery) is… Part 1 of the Counter-Terrorism Act 2008 (powers to gather and share information) is amended in accordance wi… Section 18 material which is not a DNA sample may be retained indefinitely by a law enforcement authority if— Article 13(1) of the eIDAS Regulation; Article 24(2)(b) of the eIDAS Regulation; Article 18 of the eIDAS Regulation (co-operation with EU authorities) is amended as follows. Section 56: National Underground Asset Register (England and Wales): monetary Schedule 2 insert—: “Schedule 2ZA Section 13 (registration of name of child or of alteration of name) is amended as follows. Section 29 (correction of errors in registers) is amended as follows. Section 30 (searches of indexes kept by Registrar General) is amended as follows. Section 33 (short certificate of birth) is amended as follows. Section 564 of the Education Act 1996 (certificates of birth and registrars’ returns) is amended as follows. Section 10 (registration) is amended as follows. Article 12 (transparent information, communication and modalities for the exercise of the rights of the data… Section 52 (form of provision of information etc) is amended as follows. Section 53 (manifestly unfounded or excessive requests by the data subject) is amended as follows. Chapter 5 of the UK GDPR (transfers of personal data to third countries or international organisations) is am… Part 2 of the 2018 Act, and Article 46 (transfers subject to appropriate safeguards) is amended as follows. Article 49 (derogations for specific situations) is amended as follows. Chapter 5 of Part 3 of the 2018 Act (transfers of personal data to third countries etc) is amended as follows. Section 72 (overview and interpretation), in subsection (1)(b)— Section 73 (general principles for transfers) is amended as follows. Section 75 (transfers on the basis of appropriate safeguards) is amended as follows. Section 76 (transfers on the basis of special circumstances) is amended as follows. Section 77 (conditions for transfers of personal data to persons other than relevant authorities) is amended… Section 78 (subsequent transfers) is amended as follows. Article 40 (codes of conduct) is amended as follows. Section 182 (regulations and consultation) is amended as follows. 2018 Act, and Article 46(1A)(a)(i) of the UK GDPR, or Article 49(4A) of the UK GDPR (inserted by Part 3 of the 2018 Act (law enforcement processing): transfers approved by regulations Part 3 of the 2018 Act (law enforcement processing): transfers subject to appropriate safeguards Article 13(2) (information to be provided where personal data are collected from the data subject) is amended… Article 14(2) (information to be provided where personal data have not been obtained from the data subject) i… Article 15(1) (right of access by the data subject) is amended as follows. Article 80 (representation of data subjects) is amended as follows. Section 44 (information: controller’s general duties) is amended as follows. Section 45 (right of access by the data subject) is amended as follows. Section 48 (rights to rectification, to erasure or to restriction of processing: supplementary) is amended as… Section 149 (enforcement notices) is amended as follows. Section 166 (orders to progress complaints) is amended as follows. Section 187 (representation of data subjects with their authority) is amended as follows. Article 4(1) (interpretation) is amended as follows. Article 3 of the Periods of Time Regulation, except in Article 91A(8) Section 125 (approval of codes of practice prepared by the Commissioner) is amended as follows. Schedule 1 (special categories of personal data and criminal convictions etc data) is amended as follows. Schedule 2 (exemptions etc from the UK GDPR) is amended as follows. Article 17(1)(g), (4) and (5) of the UK GDPR (right to erasure), and Section 142 has effect as if— Section 143 has effect as if subsections (1) and (9) were omitted. Section 145(2)(b) has effect as if for “section 142(2)(b)” there were substituted “section 142(2)”. Section 146 has effect as if— Section 147 has effect as if subsection (5) were omitted. Section 149 has effect as if subsections (2) to (5A) and (7) to (9) were omitted. Section 150 has effect as if subsection (3) were omitted. Section 152 has effect as if subsections (1), (2) and (4) were omitted. Schedule 15 has effect as if paragraph 3 were omitted. Section 155 has effect as if— Schedule 16 has effect as if paragraphs 3(2)(b) and 5(2)(b) were omitted. Section 156 has effect as if subsections (1), (2), (4)(b) and (5) were omitted. Section 157 has effect as if— Section 159 has effect as if— Section 160 has effect as if, in subsection (4)(f), for “controllers and processors” there were substituted “… Section 162 has effect as if subsection (4) were omitted. Section 163 has effect as if subsection (6) were omitted. Section 180 has effect as if subsections (2)(b), (c), (d) and (e) and (3) were omitted. Section 181 has effect as if the definition of “certification provider” were omitted. Section 182 has effect as if subsections (3), (6), (8), (11), (12) and (14) were omitted. Section 196 has effect as if subsections (3) to (5) were omitted. Section 202 has effect as if, in subsection (1)(a), for sub-paragraphs (i) and (ii) there were substituted “o… Section 203 has effect as if— Schedule 12A to the Data Protection Act 2018 Section 250 (powers to publish information standards) is amended as follows. Section 251 (information standards: procedure etc) is amended as follows. Section 304(9) applies in relation to the power to make arrangements under subsection The outline comes from headings detected in the text, so it might miss some or include extras. JavaScript is turned off. To read the text, open each of its 3 parts: Part 1Part 2Part 3 331 of 1,262, newest first Previous Relating to the use of certain automated systems in, and certain adverse determinations made in connection with, the health benefit claims process. Next Preventing Deep Fake Scams Act Show a random instrument All instruments