Skip to content
Legislations.
United KingdomUnited KingdomLawLaw2025 c. 18

Data (Use and Access) Act 2025

Reforms UK data protection law, creates frameworks for digital verification services and smart data, restructures the Information Commissioner's Office, adds an offence of creating or requesting intimate images of adults without consent, and requires government reports on copyright and AI.

Where it stands

In forceIntroducedCommitteeFloorLawIn force

Section 138 offences on creating or requesting purported intimate images of adults without consent in forceFeb 67 months ago

Body
UK Parliament
Session
2024 to 2026 session
Introduced
Oct 23, 2024
In effect since
Aug 20, 20251 year ago
DataPrivacyDeepfakesCopyrightAI
Official page Source: GOV.UK (DSIT) and UK Parliament Bills API On Regulations: Data (Use and Access) Act

Timeline

  1. Feb 6 7 months ago

    Section 138 offences on creating or requesting purported intimate images of adults without consent in force

  2. Feb 5 7 months ago

    Majority of the Part 5 data protection and privacy provisions in force

  3. Dec 1, 2025 10 months ago

    Stage 3: majority of Part 2 digital verification services (digital identity) measures in force

  4. Sep 30, 2025 12 months ago

    Stage 2 commencement includes section 124 on retention of information by regulated online services for child death investigations

  5. Aug 20, 2025 1 year ago

    Stage 1 commencement: technical provisions, new ICO statutory objectives, and duties to report on copyright works and AI systems in force

  6. Jun 19, 2025 1 year ago

    Royal Assent after ping-pong between the Houses

  7. May 7, 2025 1 year ago

    Commons report stage and third reading

  8. Feb 6, 2025 1 year ago

    Commons first reading

  9. Feb 5, 2025 1 year ago

    Lords third reading

  10. Nov 19, 2024 1 year ago

    Lords second reading

  11. Oct 23, 2024 1 year ago

    Introduced in the House of Lords (first reading)