The Data (Use and Access) Act 2025 (Commencement No. 2) Regulations 2025 brought into force section 124 of the Data (Use and Access) Act 2025, amending the Online Safety Act 2023 regarding data retention for child death investigations.

These regulations, enacted under the Data (Use and Access) Act 2025, bring into force section 124 on September 30, 2025.

This section amends the Online Safety Act 2023, requiring providers of certain regulated online services to retain information related to child death investigations.

The regulations are the second set issued under the 2025 Act, and an impact assessment referencing a prior assessment was published on the UK Government website.

The regulations established commencement dates for sections of the Data (Use and Access) Act 2025 and included transitional provisions to protect data subjects' rights.

These regulations set commencement dates for parts of the Data (Use and Access) Act 2025, amending the Data Protection Act 2018.

Sections 79 and 88 (legal professional privilege and national security exemptions) come into force immediately, while sections 89 and 90 (joint processing by intelligence and authorities) commence on November 17, 2025.

Transitional provisions protect data subjects' rights previously established under the 2018 Act until the 2025 Act changes come into effect.

The Online Safety Super-Complaints (Eligibility and Procedural Matters) Regulations 2025 were enacted, establishing eligibility criteria and procedures for super-complaints regarding online safety to OFCOM.

These regulations, effective December 31, 2025, govern the submission of super-complaints regarding online safety to OFCOM under the Online Safety Act 2023.

They define eligibility criteria for entities submitting complaints, specifying requirements for supporting evidence and the information to be included in the complaints.

The regulations also outline grounds for rejecting complaints, procedures for OFCOM's response, and restrictions on complaint submissions.

These regulations commenced specific provisions of the Data (Use and Access) Act 2025 on August 20, 2025, including those related to data access, data protection amendments, the Information Commission, and online safety.

The Data (Use and Access) Act 2025 (Commencement No. 1) Regulations 2025 bring into force various sections of the Data (Use and Access) Act 2025, effective August 20, 2025.

These sections cover aspects such as access to customer and business data, amendments to the UK GDPR and Data Protection Act 2018, the establishment of the Information Commission, and provisions related to online safety, eIDAS regulations, copyright, and AI. The regulations specify which subsections of each section come into force, and their geographical extent across the UK.

Section 210 of the Online Safety Act 2023 was brought into force, repealing Part 4B of the Communications Act 2003 and ending a transition period for online video-sharing platforms.

These regulations bring into force section 210 of the Online Safety Act 2023 on July 25, 2025.

This section repeals Part 4B of the Communications Act 2003, ending a transition period that began in January 2024.

The change puts video-sharing platforms under the Online Safety Act's updated duties of care.

The regulations apply across England, Wales, Scotland, and Northern Ireland.

A full impact assessment is available.

The Criminal Justice Act 2003 was amended to change the criteria for automatic release for recalled prisoners, with stricter conditions introduced to enhance public safety, and a new schedule of offenses listed that preclude automatic release.

This Order modifies the Criminal Justice Act 2003, changing the conditions for automatic release of recalled prisoners in England and Wales.

It introduces stricter criteria, including a new schedule of offenses that disqualify prisoners from automatic release after 28 days (or 14 days for sentences less than 12 months).

The revised criteria consider factors such as age, sentence length, offense type, terrorist-related activity, and multi-agency public protection arrangements (MAPPA) levels.

The amendments aim to improve public safety by retaining those deemed a higher risk in custody for extended periods.

The 2025 Order extended UK legislation to Guernsey, amending information sharing procedures and repealing sections of the Police Act 1997.

The Safeguarding Vulnerable Groups Act 2006 (Guernsey) Order 2025 extends specific provisions of the UK's Safeguarding Vulnerable Groups Act 2006 and the Protection of Freedoms Act 2012 to the Bailiwick of Guernsey.

Key changes include modifying information-sharing requirements between Guernsey's police force and the UK's Disclosure and Barring Service (DBS) to enhance barring decisions related to individuals working with vulnerable adults and children.

The order also amends the Police Act 1997 (Criminal Records) (Guernsey) (Amendment) Order 2012 to reflect these changes.

The Safeguarding Vulnerable Groups Act 2006 (Jersey) Order 2025 extended relevant provisions of the 2006 and 2012 UK Acts to Jersey, amended the Police Act 1997 (Criminal Records) (Jersey) (Amendment) Order 2012, and implemented modifications to ensure consistency in safeguarding vulnerable groups.

This Order extends parts of the UK's Safeguarding Vulnerable Groups Act 2006 and Protection of Freedoms Act 2012 to Jersey.

Specifically, it mandates information sharing between Jersey authorities and the UK's Disclosure and Barring Service (DBS) to support barring decisions for individuals working with vulnerable adults or children.

The Order also amends the Police Act 1997 (Criminal Records) (Jersey) (Amendment) Order 2012 to clarify the extent of Part 5 of Schedule 10 of the 2012 Act's applicability to Jersey.