Made under the Data (Use and Access) Act 2025
7 statutory instruments made using powers in the Data (Use and Access) Act 2025, newest first. Each one is explained section by section in plain English.
The Data (Use and Access) Act 2025 (Commencement No. 9 and Transitional and Saving Provisions) Regulations 2026
- Department: Department for Digital, Culture, Media and Sport
- Made under: Data (Use and Access) Act 2025
Abolished the office of the Information Commissioner and transferred all regulatory functions to the Information Commission effective September 2026.
These Regulations bring into force provisions of the Data (Use and Access) Act 2025 that abolish the office of the Information Commissioner and transfer its functions to a new body known as the Information Commission.
Taking effect on 30 September 2026, the instrument establishes legal continuity, ensuring that any ongoing proceedings or actions involving the Commissioner are inherited by the Commission.
The regulations apply to the Information Commission, the Department for Digital, Culture, Media and Sport, and any parties currently engaged in legal or administrative processes with the UK data protection regulator.
The Motor Fuel Price (Open Data) Regulations 2025
- Department: Department for Energy Security and Net Zero
- Made under: Data (Use and Access) Act 2025
The Secretary of State introduced regulations creating an open data scheme for motor fuel prices, establishing an aggregator, imposing data submission duties on fuel traders, granting enforcement powers to the CMA, and setting financial penalties and procedural appeals.
These Regulations, made under the Data (Use and Access) Act 2025, establish a mandatory open data scheme requiring motor fuel traders in England, Wales, Scotland, and Northern Ireland to register their petrol filling stations and report the selling price of motor fuels to an appointed third-party 'aggregator'.
Motor fuel traders must provide this price information, including any subsequent changes within 30 minutes of occurrence, for public dissemination via an Application Programming Interface (API) and other means.
The Competition and Markets Authority (CMA) is responsible for enforcement, with powers to issue compliance notices, conduct investigations, impose financial penalties up to 1% of worldwide turnover, and pursue criminal sanctions for false information or obstruction.
The Data (Use and Access) Act 2025 (Consequential and Other Amendments) Regulations 2025
The Regulations amended numerous secondary legal instruments to align with the Data (Use and Access) Act 2025, repealed a section of the Data Protection Act 2018 concerning recordable offences, and updated electoral and company disclosure rules concerning data processing safeguards.
These Regulations finalize the transition following the enactment of the Data (Use and Access) Act 2025 by making necessary consequential amendments across various pieces of UK legislation.
Key actions include repealing a section of the Data Protection Act 2018 concerning recordable offences while simultaneously updating regulations to ensure the new offence of making false statements in response to an interview notice becomes recordable, and revising numerous electoral and company disclosure rules to align references from the UK GDPR concerning data processing for research and archiving purposes (replacing references to Article 89 with Article 84A).
The Data (Use and Access) Act 2025 (Commencement No. 4) Regulations 2025
- Department: Department for Science, Innovation and Technology
- Made under: Data (Use and Access) Act 2025
The Regulations formally commenced most of Part 2 of the Data (Use and Access) Act 2025, establishing the framework for digital verification services, effective 1st December 2025.
These Regulations officially bring into force key provisions of the Data (Use and Access) Act 2025 related to digital verification services across the United Kingdom, setting the commencement date for most of Part 2, excluding sections 45 to 48 which cover public authority information sharing, to 1st December 2025, exercising powers granted under section 142(1) of the same Act.
The Data (Use and Access) Act 2025 (Commencement No. 2) Regulations 2025
- Department: Department for Science, Innovation and Technology
- Made under: Data (Use and Access) Act 2025
The Data (Use and Access) Act 2025 (Commencement No. 2) Regulations 2025 brought into force section 124 of the Data (Use and Access) Act 2025, amending the Online Safety Act 2023 regarding data retention for child death investigations.
These regulations, enacted under the Data (Use and Access) Act 2025, bring into force section 124 on September 30, 2025.
This section amends the Online Safety Act 2023, requiring providers of certain regulated online services to retain information related to child death investigations.
The regulations are the second set issued under the 2025 Act, and an impact assessment referencing a prior assessment was published on the UK Government website.
The Data (Use and Access) Act 2025 (Commencement No. 3 and Transitional and Saving Provisions) Regulations 2025
- Department: Home Office
- Made under: Data (Use and Access) Act 2025
The regulations established commencement dates for sections of the Data (Use and Access) Act 2025 and included transitional provisions to protect data subjects' rights.
These regulations set commencement dates for parts of the Data (Use and Access) Act 2025, amending the Data Protection Act 2018.
Sections 79 and 88 (legal professional privilege and national security exemptions) come into force immediately, while sections 89 and 90 (joint processing by intelligence and authorities) commence on November 17, 2025.
Transitional provisions protect data subjects' rights previously established under the 2018 Act until the 2025 Act changes come into effect.
The Data (Use and Access) Act 2025 (Commencement No. 1) Regulations 2025
- Department: Department for Science, Innovation and Technology
- Made under: Data (Use and Access) Act 2025
These regulations commenced specific provisions of the Data (Use and Access) Act 2025 on August 20, 2025, including those related to data access, data protection amendments, the Information Commission, and online safety.
The Data (Use and Access) Act 2025 (Commencement No. 1) Regulations 2025 bring into force various sections of the Data (Use and Access) Act 2025, effective August 20, 2025.
These sections cover aspects such as access to customer and business data, amendments to the UK GDPR and Data Protection Act 2018, the establishment of the Information Commission, and provisions related to online safety, eIDAS regulations, copyright, and AI. The regulations specify which subsections of each section come into force, and their geographical extent across the UK.