Skip to main content

SponsoredBuild your website with Vincony

Disclaimer: This is not legal advice. Legislation and case law change. Always consult a qualified solicitor for your specific situation.

UK Law Reference
Data (Use and Access) Act 2025 overview

Data (Use and Access) Act 2025 — full text by section

Consolidated text as published on legislation.gov.uk, snapshot 2026-08-24. Read the Act on legislation.gov.uk

144 sections. Default extent: E+W+S+N.I..

  1. s.1Customer data and business data
  2. s.2Power to make provision in connection with customer data
  3. s.3Customer data: supplementary
  4. s.4Power to make provision in connection with business data
  5. s.5Business data: supplementary
  6. s.6Decision-makers
  7. s.7Interface bodies
  8. s.8Enforcement of regulations under this Part
  9. s.9Restrictions on powers of investigation etc
  10. s.10Financial penalties
  11. s.11Fees
  12. s.12Levy
  13. s.13Financial assistance
  14. s.14The FCA and financial services interfaces
  15. s.15The FCA and financial services interfaces: supplementary
  16. s.16The FCA and financial services interfaces: penalties and levies
  17. s.17The FCA and co-ordination with other regulators
  18. s.18Liability in damages
  19. s.19Duty to review regulations
  20. s.20Restrictions on processing and data protection
  21. s.21Regulations under this Part: supplementary
  22. s.22Regulations under this Part: Parliamentary procedure and consultation
  23. s.23Related subordinate legislation
  24. s.24Repeal of provisions relating to supply of customer data
  25. s.25Other defined terms
  26. s.26Index of defined terms for this Part
  27. s.27Introductory
  28. s.28DVS trust framework
  29. s.29Supplementary codes
  30. s.30Withdrawal of a supplementary code
  31. s.31Review of DVS trust framework and supplementary codes
  32. s.32DVS register
  33. s.33Registration in the DVS register
  34. s.34Power to refuse registration in the DVS register
  35. s.35Registration of additional services
  36. s.36Supplementary notes
  37. s.37Addition of services to supplementary notes
  38. s.38Applications for registration, supplementary notes, etc
  39. s.39Fees for applications for registration, supplementary notes, etc
  40. s.40Duty to remove person from the DVS register
  41. s.41Power to remove person from the DVS register
  42. s.42Duty to remove services from the DVS register
  43. s.43Duty to remove supplementary notes from the DVS register
  44. s.44Duty to remove services from supplementary notes
  45. s.45Power of public authority to disclose information to registered person
  46. s.46Information disclosed by the Revenue and Customs
  47. s.47Information disclosed by the Welsh Revenue Authority
  48. s.48Information disclosed by Revenue Scotland
  49. s.49Code of practice about the disclosure of information
  50. s.50Trust mark for use by registered persons
  51. s.51Power of Secretary of State to require information
  52. s.52Arrangements for third party to exercise functions
  53. s.53Report on the operation of this Part
  54. s.54Index of defined terms for this Part
  55. s.55Powers relating to verification of identity or status
  56. s.56National Underground Asset Register: England and Wales(E+W)
  57. s.57Information in relation to apparatus: England and Wales
  58. s.58National Underground Asset Register: Northern Ireland(N.I.)
  59. s.59Information in relation to apparatus: Northern Ireland(N.I.)
  60. s.60Pre-commencement consultation(E+W+N.I.)
  61. s.61Form in which registers of births and deaths are to be kept(E+W)
  62. s.62Provision of equipment and facilities by local authorities(E+W)
  63. s.63Requirements to sign register(E+W)
  64. s.64Treatment of existing registers and records(E+W)
  65. s.65Minor and consequential amendments
  66. s.66The 2018 Act and the UK GDPR
  67. s.67Meaning of research and statistical purposes
  68. s.68Consent to processing for the purposes of scientific research
  69. s.69Consent to law enforcement processing
  70. s.70Lawfulness of processing
  71. s.71The purpose limitation
  72. s.72Processing in reliance on relevant international law
  73. s.73Elected representatives responding to requests
  74. s.74Processing of special categories of personal data
  75. s.75Fees and reasons for responses to data subjects’ requests about law enforcement processing
  76. s.76Time limits for responding to data subjects’ requests
  77. s.77Information to be provided to data subjects
  78. s.78Searches in response to data subjects’ requests
  79. s.79Data subjects’ rights to information: legal professional privilege exemption
  80. s.80Automated decision-making
  81. s.81Data protection by design: children’s higher protection matters
  82. s.82Logging of law enforcement processing
  83. s.83General processing and codes of conduct
  84. s.84Law enforcement processing and codes of conduct
  85. s.85Transfers of personal data to third countries and international organisations
  86. s.86Safeguards for processing for research etc purposes
  87. s.87Section 86: consequential provision
  88. s.88National security exemption
  89. s.89Joint processing by intelligence services and competent authorities
  90. s.90Joint processing: consequential amendments
  91. s.91Duties of the Commissioner in carrying out functions
  92. s.92Codes of practice for the processing of personal data
  93. s.93Codes of practice: panels and impact assessments
  94. s.94Manifestly unfounded or excessive requests to the Commissioner
  95. s.95Analysis of performance
  96. s.96Notices from the Commissioner
  97. s.97Power of the Commissioner to require documents
  98. s.98Power of the Commissioner to require a report
  99. s.99Assessment notices: removal of OFSTED restriction
  100. s.100Interview notices
  101. s.101Penalty notices
  102. s.102Annual report on regulatory action
  103. s.103Complaints by data subjects
  104. s.104Court procedure in connection with subject access requests
  105. s.105Consequential amendments to the EITSET Regulations
  106. s.106Protection of prohibitions, restrictions and data subject’s rights
  107. s.107Regulations under the UK GDPR
  108. s.108Further minor provision about data protection
  109. s.109The PEC Regulations
  110. s.110Interpretation of the PEC Regulations
  111. s.111Duty to notify the Commissioner of personal data breach: time periods
  112. s.112Storing information in the terminal equipment of a subscriber or user
  113. s.113Emergency alerts: interpretation of time periods
  114. s.114Use of electronic mail for direct marketing by charities
  115. s.115Commissioner’s enforcement powers
  116. s.116Codes of conduct
  117. s.117The Information Commission
  118. s.118Abolition of the office of Information Commissioner
  119. s.119Transfer of functions to the Information Commission
  120. s.120Transfer of property etc to the Information Commission
  121. s.121Information standards for health and adult social care in England(E+W)
  122. s.122Grant of smart meter communication licences
  123. s.123Disclosure of information to improve public service delivery to undertakings
  124. s.124Retention of information by providers of internet services in connection with death of child
  125. s.125Information for research about online safety matters
  126. s.126Retention of biometric data and recordable offences
  127. s.127Retention of pseudonymised biometric data
  128. s.128Retention of biometric data from INTERPOL
  129. s.129The eIDAS Regulation
  130. s.130Recognition of EU conformity assessment bodies
  131. s.131Removal of recognition of EU standards etc
  132. s.132Recognition of overseas trust products
  133. s.133Co-operation between supervisory authority and overseas authorities
  134. s.134Time periods: the eIDAS Regulation and the EITSET Regulations
  135. s.135Economic impact assessment
  136. s.136Report on the use of copyright works in the development of AI systems
  137. s.137Progress statement
  138. s.138Creating, or requesting the creation of, purported intimate image of adult
  139. s.139Power to make consequential amendments
  140. s.140Regulations
  141. s.141Extent
  142. s.142Commencement
  143. s.143Transitional, transitory and saving provision
  144. s.144Short title