As UK data reform bill becomes law, it amounts to tweaks, not a full rewrite

By Patricia Figueiredo ( June 19, 2025, 12:12 GMT | Comment) -- Companies get more flexible rules for automated decision making but are set to face tougher enforcement on cookies and direct marketing under the UK's Data (Use and Access) Act, which becomes law today. Short of a full overhaul to UK data protection rules, it introduces limited exemptions to cookie consent and narrows restrictions on AI-driven decisions. Its adoption is significant, too, as it allows the European Commission to complete a delayed review of the UK's EU data adequacy status. Businesses finally have certainty on UK legislation that updates the national data protection framework for the post-Brexit era. The Data (Use and Access) Act became law today after receiving "royal assent" in Parliament, overlaying the UK General Data Protection Regulation....

Prepare for tomorrow’s regulatory change, today

MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.

Know what others in the room don’t, with features including:

Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
Curated case files bringing together news, analysis and source documents in a single timeline

Experience MLex today with a 14-day free trial.

Start Free Trial

Already a subscriber? Click here to login

As UK data reform bill becomes law, it amounts to tweaks, not a full rewrite

Prepare for tomorrow’s regulatory change, today

Related Sections