The Information Commissioner’s Office (ICO) has published guidance for organisations on the Data (Use and Access) Act 2025, which received Royal Assent on 19 June 2025.

The Act makes changes to data protection law in order to promote innovation and economic growth and make things easier for organisations, whilst still protecting individuals and their rights. The changes are being phased in between June 2025 and June 2026.

Topics covered by the guidance include what data protection laws the Act changes, how the Act might make things easier for organisations and help them to innovate, and what organisations can do to prepare for the changes.

The ICO also provides a summary of the changes the Act makes to data protection law, aimed at Data Protection Officers and other data protection experts, and information on how the changes will affect regulatory action it takes.