The Data (Use and Access) Act's data protection reforms – what now?
The Data (Use and Access) Act (DUAA) was a long time in the making: it finally received Royal Assent on 19 June 2025 after weeks of "ping-pong" between the two Houses of Parliament over transparency measures in relation to AI and copyright - measures that were ultimately dropped. The DUAA includes a package of data protection and e-privacy reforms, introduces frameworks for smart data and digital verification schemes and puts the National Underground Asset Register on a statutory footing. Now it is finally here, what happens next? This briefing sets out key takeaways for businesses in relation to the DUAA's data protection reforms.