The UK’s Data (Use and Access) Act 2025 brought several major data-protection reforms into force on February 5, 2026, affecting employers and organizations. Key changes include a new lawful basis of recognized legitimate interests, codified subject-access request rules, relaxed automated decision-making limits for certain data, adjusted international transfer tests, and expanded regulator powers. A new right to complain directly to data controllers will take effect in June 2026.
