Skip to Primary Navigation

Latest provisions of UK’s DUAA Act 2025 come into force

A woman holding a phone.
The Act introduces new requirements for using children’s personal data. Photo: Franz12/Getty Images

The ICO has said the new provisions will enable it to continue to operate as a trusted, fair, and independent regulator with a stronger, modernized structure.

Some of the latest provisions of the UK’s Data Use and Access (DUAA) Act 2025 affecting data protection law and the Privacy and Electronic Regulations Communications Regulations are now in force. This includes the introduction of a new mandatory complaints procedure for companies dealing with individuals’ personal information.

The UK Parliament

Get full access, free for a month

This is a Premium article. Start your 28-day free trial to continue reading and access all content on GRIP – no payment details required.

What’s included:

  • Every new article, plus our 5,000+ archive
  • Daily regulatory insight and guidance
  • Exclusive interviews and in-depth analysis
  • Coverage of industry-leading events and conferences
  • All podcasts and videos, featuring industry experts
  • The full set of Rules Navigator tools
  • An ad-free experience