The UK’s Data (Use and Access) Act 2025 largely went into force as of February 5, 2026, bringing major reforms to UK data law. Key changes include a new regime for automated decision-making with safeguards, a revised test for international data transfers, tougher cookie and privacy rules with higher fines, and updated data subject rights. Most provisions are now active, with one new complaint beginning on June 19, 2026, so organizations should update policies and compliance practices.

