Key reforms to the UK’s data protection and privacy laws under the Data (Use and Access) Act 2025 came into effect on February 5, 2026, shifting the UK’s framework away from some EU standards. Changes include new cookie-consent exceptions, increased ICO enforcement powers, enhanced protections for children online, clarified data subject access requests, relaxed restrictions on automated decision-making, defined research processing, and a list of recognized legitimate interests. Businesses should review their compliance frameworks.
