{"id":193985,"date":"2025-06-27T02:31:23","date_gmt":"2025-06-27T01:31:23","guid":{"rendered":"https:\/\/legalvision.co.uk\/?p=193985"},"modified":"2025-07-01T00:50:20","modified_gmt":"2025-06-30T23:50:20","slug":"data-use-access-act-2025","status":"publish","type":"post","link":"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/","title":{"rendered":"Data Use and Access Act 2025: Key Privacy Law Changes for UK Businesses"},"content":{"rendered":"\n<p>The new <strong>Data Use and Access Act 2025 (DUAA)<\/strong> changes how businesses in the UK handle personal data. As a business owner, understanding these updates is crucial due to their broad impact, from handling customer information to marketing your products and services. The new Act amends existing legislation and carries serious consequences for non-compliance. This article highlights the key changes that small and medium-sized businesses in the UK need to be aware of.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What is the DUAA?&nbsp;<\/h2>\n\n\n\n<p>The <strong>Data Use and Access Act 2025 (DUAA)<\/strong> is new legislation that updates personal data and direct marketing rules. While it largely builds on existing laws, the DUAA introduces key changes that businesses must understand to remain compliant.<\/p>\n\n\n\n<div  class=\"box box--icon box--info\">\n    <p>The DUAA also covers updates related to <a href=\"https:\/\/legalvision.co.uk\/corporate\/financial-conduct-authority-regulated-activities\/\">the Financial Conduct Authority (FCA)<\/a>, the register of births and deaths, and digital verification services.<\/p>\n<\/div>\n\n\n\n    <div class=\"my-7 lg:my-10 border-y-2 border-gray-100 py-7 lg:py-10 flex flex-col sm:flex-row items-start gap-10\">\n                    <img decoding=\"async\" class=\"w-52 mx-auto my-0! rounded\" src=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/09\/30065809\/LV-UK-Personal-Data-Breach-Notification-Factsheet.png\" alt=\"Front page of publication\"\n                 loading=\"lazy\" width=\"208\" height=\"298\">\n                <section>\n            <div class=\"text-2xl font-bold\">Personal Data Breach Notification Factsheet<\/div>\n            <div class=\"body-text\">\n                <p>This factsheet outlines the steps for notifying the ICO and affected individuals about personal data breaches.<\/p>\n            <\/div>\n            \n\n<a href=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/09\/30065528\/LegalVision_UK-Personal-Data-Breach-Notification-Factsheet.pdf\" class=\" block px-5 py-3.5 max-w-fit bg-orange button__hover transition rounded text-white font-bold text-lg no-underline uppercase leading-tight text-center\" target=\"\" rel=\"\">Download Now<\/a>        <\/section>\n    <\/div>\n\n\n\n\n<h2 class=\"wp-block-heading\">Key Changes for Businesses<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">1. Significant Penalties for PECR Breaches<\/h3>\n\n\n\n<p>Previously, PECR breaches, such as unlawful direct marketing, had lower penalties. Now, businesses face fines of up to the greater of \u00a317.5 million or 4% of their global annual turnover for PECR violations. <\/p>\n\n\n\n<p>This is because the <a href=\"https:\/\/ico.org.uk\/\">Information Commissioner\u2019s Office\u2019s<\/a> (<strong>ICO<\/strong>) enforcement powers under Privacy and Electronic Communications Regulations (<strong>PECR<\/strong>) have been aligned with those of the <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/how-does-gdpr-affect-my-business\/\">UK General Data Protection Regulation<\/a> (<strong>UK GDPR<\/strong>). This brings PECR penalties in line with those under the UK GDPR.<\/p>\n\n\n\n<p>This change particularly affects businesses engaged in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>email marketing;<\/li>\n\n\n\n<li>SMS marketing;<\/li>\n\n\n\n<li>cold calling; and<\/li>\n\n\n\n<li>using non-essential cookies on their website.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">2. New Legitimate Interests Gateway<\/h3>\n\n\n\n<p>The DUAA introduces a new lawful basis for processing personal data, known as &#8220;recognised legitimate interests&#8221;. It provides examples of processing that may qualify as legitimate interests. The DUAA also adds other examples you can use when establishing a lawful basis, such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>direct marketing activities;<\/li>\n\n\n\n<li>internal group company data transfers of personal data (whether relating to clients, employees or other individuals) for administrative purposes; and<\/li>\n\n\n\n<li>processing necessary for the purposes of ensuring the security of network and information systems.<\/li>\n<\/ul>\n\n\n\n<p>This offers clearer guidance on when you can rely on legitimate interests. However, businesses must still conduct balancing tests and consider individuals&#8217; rights.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Enhanced Protection for Children Online<\/h3>\n\n\n\n<p>New requirements specifically protect children using online services. If you provide &#8220;information society services&#8221; such as websites likely to be accessed by children, you must:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>consider how children can best be protected when using their services;<\/li>\n\n\n\n<li>account for children&#8217;s different needs at different ages and developmental stages; and<\/li>\n\n\n\n<li>recognise that children may be less aware of data processing risks and their rights.<\/li>\n<\/ul>\n\n\n\n<p>You must therefore prioritise the privacy of children when designing your systems and procedures.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Changes to Data Subject Rights and Time Limits<\/h3>\n\n\n\n<p>Several changes affect how you handle data subject requests. However, this mainly formalises the guidance previously issued by the ICO.<\/p>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table><thead><tr><th><strong>Change<\/strong><\/th><th><strong>Details<\/strong><\/th><\/tr><\/thead><tbody><tr><td><strong>Extended Time Limits<\/strong><\/td><td>You can now extend response times by up to two months (from one to three months in total) if the requests are complex or numerous, as long as you notify the data subject within the original one-month period.<\/td><\/tr><tr><td><strong>Reasonable Search Requirements<\/strong><\/td><td>You are only required to provide information that can be obtained through &#8220;reasonable and proportionate&#8221; searches, which gives you clearer boundaries on what is expected.<\/td><\/tr><tr><td><strong>Legal Professional Privilege<\/strong><\/td><td>There is now an exemption that protects legally privileged information from being disclosed in response to data subject requests.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">5. Automated Decision-Making Rules<\/h3>\n\n\n\n<p>The DUAA updates the rules around <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/automated-decision-gdpr\/\">automated decision-making<\/a>, introducing more detailed requirements. As a business, you must be aware of any decisions made about a person using automated processing. Three of the key changes include:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>&#8220;Significant decisions&#8221; are redefined as those with legal effects or similarly significant impacts.<\/li>\n\n\n\n<li>New safeguards must be implemented before making decisions using automated processing. This includes providing information about automated decisions and enabling human intervention.<\/li>\n\n\n\n<li>Special restrictions apply to decisions based on special category data.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">6. Research and Statistical Processing<\/h3>\n\n\n\n<p>New safeguards apply when processing personal data for research, archiving, or statistical purposes. These include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>processing must be necessary and cannot cause substantial damage or distress;<\/li>\n\n\n\n<li>technical and organisational measures like pseudonymisation are required; and<\/li>\n\n\n\n<li>specific protections apply for different types of research.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">7. Cookie and Terminal Equipment Rules<\/h3>\n\n\n\n<p>The DUAA introduces exceptions to the consent requirement before storing information on users&#8217; devices (such as through <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/cookie-policy\/\">cookies<\/a>). These include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>a detailed list of exceptions to the basic prohibition on using cookies, which remains in place;&nbsp;<\/li>\n\n\n\n<li>clear consent requirements remain, but now allow various mechanisms, including browser settings;<\/li>\n\n\n\n<li>new exceptions allow cookies without consent for strictly necessary functions (e.g., security, fraud prevention, authentication), statistical purposes (with opt-out available), and website functionality enhancements (with simple objection mechanisms); and<\/li>\n\n\n\n<li>the rules now explicitly cover mobile applications and all information society service platforms, not just websites. One-time consent is sufficient for repeated use of the same network for identical purposes.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">8. Charity Email Marketing Exception<\/h3>\n\n\n\n<p>If you are a charity, a new exception allows you to send direct marketing emails if:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the sole purpose is furthering charitable purposes;<\/li>\n\n\n\n<li>contact details were obtained when recipients expressed interest in or supported those purposes; and<\/li>\n\n\n\n<li>recipients can easily opt out.<\/li>\n<\/ul>\n\n\n\n\n<a href=\"#content-next\"\n   class=\"block p-4 mt-10 text-xl font-bold text-center text-white no-underline bg-gray-800 rounded-t-xl\">\n    Continue reading this article below the form\n    <i class=\"text-xl fa-regular fa-arrow-down\"><\/i>\n<\/a>\n<div class=\"px-6 pt-10 pb-12 mb-10 text-center bg-gray-100 rounded-b-xl sm:px-12 test\">\n    <div class=\"mb-8 text-2xl font-bold text-orange\">\n        Need legal advice?\n        <br>\n        <span class=\"text-lg not-prose\">\n                            Call <a href=\"tel:+448081968584\" class=\"not-prose\">0808 196 8584<\/a> for urgent assistance.\n                <br>\n                Otherwise, complete this form, and we will contact you within one business day.\n                    <\/span>\n    <\/div>\n\n    \n\n<div class=\"not-prose flex justify-center text-left gform_input_bg_white    \">\n    <script>\nvar gform;gform||(document.addEventListener(\"gform_main_scripts_loaded\",function(){gform.scriptsLoaded=!0}),document.addEventListener(\"gform\/theme\/scripts_loaded\",function(){gform.themeScriptsLoaded=!0}),window.addEventListener(\"DOMContentLoaded\",function(){gform.domLoaded=!0}),gform={domLoaded:!1,scriptsLoaded:!1,themeScriptsLoaded:!1,isFormEditor:()=>\"function\"==typeof InitializeEditor,callIfLoaded:function(o){return!(!gform.domLoaded||!gform.scriptsLoaded||!gform.themeScriptsLoaded&&!gform.isFormEditor()||(gform.isFormEditor()&&console.warn(\"The use of gform.initializeOnLoaded() is deprecated in the form editor context and will be removed in Gravity Forms 3.1.\"),o(),0))},initializeOnLoaded:function(o){gform.callIfLoaded(o)||(document.addEventListener(\"gform_main_scripts_loaded\",()=>{gform.scriptsLoaded=!0,gform.callIfLoaded(o)}),document.addEventListener(\"gform\/theme\/scripts_loaded\",()=>{gform.themeScriptsLoaded=!0,gform.callIfLoaded(o)}),window.addEventListener(\"DOMContentLoaded\",()=>{gform.domLoaded=!0,gform.callIfLoaded(o)}))},hooks:{action:{},filter:{}},addAction:function(o,r,e,t){gform.addHook(\"action\",o,r,e,t)},addFilter:function(o,r,e,t){gform.addHook(\"filter\",o,r,e,t)},doAction:function(o){gform.doHook(\"action\",o,arguments)},applyFilters:function(o){return gform.doHook(\"filter\",o,arguments)},removeAction:function(o,r){gform.removeHook(\"action\",o,r)},removeFilter:function(o,r,e){gform.removeHook(\"filter\",o,r,e)},addHook:function(o,r,e,t,n){null==gform.hooks[o][r]&&(gform.hooks[o][r]=[]);var d=gform.hooks[o][r];null==n&&(n=r+\"_\"+d.length),gform.hooks[o][r].push({tag:n,callable:e,priority:t=null==t?10:t})},doHook:function(r,o,e){var t;if(e=Array.prototype.slice.call(e,1),null!=gform.hooks[r][o]&&((o=gform.hooks[r][o]).sort(function(o,r){return o.priority-r.priority}),o.forEach(function(o){\"function\"!=typeof(t=o.callable)&&(t=window[t]),\"action\"==r?t.apply(null,e):e[0]=t.apply(null,e)})),\"filter\"==r)return e[0]},removeHook:function(o,r,t,n){var e;null!=gform.hooks[o][r]&&(e=(e=gform.hooks[o][r]).filter(function(o,r,e){return!!(null!=n&&n!=o.tag||null!=t&&t!=o.priority)}),gform.hooks[o][r]=e)}});\n<\/script>\n\n                <div class='gf_browser_gecko gform_wrapper gravity-theme gform-theme--no-framework lawyer-form_wrapper gplaceholder_wrapper form-with-labels-no-asterisks_wrapper has-new-validation-error-styling_wrapper' data-form-theme='gravity-theme' data-form-index='0' id='gform_wrapper_2453' style='display:none'><div id='gf_2453' class='gform_anchor' tabindex='-1'><\/div><form method='post' enctype='multipart\/form-data' target='gform_ajax_frame_2453' id='gform_2453' class='lawyer-form gplaceholder form-with-labels-no-asterisks has-new-validation-error-styling' action='\/api\/wp\/v2\/posts\/193985#gf_2453' data-formid='2453' novalidate>\n                        <div class='gform-body gform_body'><div id='gform_fields_2453' class='gform_fields top_label form_sublabel_below description_below validation_below'><div id=\"field_2453_1000\" class=\"gfield gfield--type-honeypot gform_validation_container field_sublabel_below gfield--has-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_1000'>Comments<\/label><div class='ginput_container'><input name='input_1000' id='input_2453_1000' type='text' value='' autocomplete='new-password'\/><\/div><div class='gfield_description' id='gfield_description_2453_1000'>This field is for validation purposes and should be left unchanged.<\/div><\/div><div id=\"field_2453_1\" class=\"gfield gfield--type-text gfield--input-type-text gf_left_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_1'>First Name<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_text'><input name='input_1' id='input_2453_1' type='text' value='' class='medium'     aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_12\" class=\"gfield gfield--type-text gfield--input-type-text gf_right_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_12'>Last Name<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_text'><input name='input_12' id='input_2453_12' type='text' value='' class='medium'     aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_2\" class=\"gfield gfield--type-email gfield--input-type-email gf_left_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_2'>Email Address<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_email'>\n                            <input name='input_2' id='input_2453_2' type='email' value='' class='medium'    aria-required=\"true\" aria-invalid=\"false\"  \/>\n                        <\/div><\/div><div id=\"field_2453_3\" class=\"gfield gfield--type-phone gfield--input-type-phone gf_right_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_3'>Phone<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_phone'><input name='input_3' id='input_2453_3' type='tel' value='' class='medium'   aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_14\" class=\"gfield gfield--type-select gfield--input-type-select gfield--width-full custom-select gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_14'>Number of Employees in Your Business<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_select'><select name='input_14' id='input_2453_14' class='large gfield_select'    aria-required=\"true\" aria-invalid=\"false\" ><option value='' selected='selected'>Select ...<\/option><option value='0' >0<\/option><option value='1' >1-5<\/option><option value='6' >6-20<\/option><option value='21' >21-50<\/option><option value='51' >51-250<\/option><option value='250' >250+<\/option><\/select><\/div><\/div><div id=\"field_2453_4\" class=\"gfield gfield--type-textarea gfield--input-type-textarea gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_4'>Tell us about your enquiry<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_textarea'><textarea name='input_4' id='input_2453_4' class='textarea medium'     aria-required=\"true\" aria-invalid=\"false\"   rows='10' cols='50'><\/textarea><\/div><\/div><div id=\"field_2453_5\" class=\"gfield gfield--type-html gfield--input-type-html gfield_html gfield_html_formatted gfield_no_follows_desc field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  >By submitting this form, you agree to receive emails from LegalVision and can unsubscribe at any time. View our <a href=\"https:\/\/legalvision.co.uk\/privacy-notice\/\" target=\"_blank\">Privacy Policy<\/a>. <\/div><div id=\"field_2453_8\" class=\"gfield gfield--type-hidden gfield--input-type-hidden gform_hidden field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><div class='ginput_container ginput_container_text'><input name='input_8' id='input_2453_8' type='hidden' class='gform_hidden'  aria-invalid=\"false\" value='http:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/193985' \/><\/div><\/div><div id=\"field_2453_13\" class=\"gfield gfield--type-hidden gfield--input-type-hidden gform_hidden field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><div class='ginput_container ginput_container_text'><input name='input_13' id='input_2453_13' type='hidden' class='gform_hidden'  aria-invalid=\"false\" value='generic_form' \/><\/div><\/div><fieldset id=\"field_2453_999\" class=\"gfield gfield--type-checkbox gfield--type-choice gfield__uk-marketo-opt-in field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><legend class='gfield_label gform-field-label screen-reader-text' ><\/legend><div class='ginput_container ginput_container_checkbox'><div class='gfield_checkbox ' id='input_2453_999'><div class='gchoice gchoice_2453_999_1'>\n\t\t\t\t\t\t\t\t<input class='gfield-choice-input' name='input_999.1' type='checkbox'  value='1'  id='choice_2453_999_1'   \/>\n\t\t\t\t\t\t\t\t<label for='choice_2453_999_1' id='label_2453_999_1' class='gform-field-label gform-field-label--type-inline'>By submitting this form, you agree to receive content and event invitations from us to help you grow your business. If you do not want to receive such messages, tick here.<\/label>\n\t\t\t\t\t\t\t<\/div><\/div><\/div><\/fieldset><\/div><\/div>\n        <div class='gform-footer gform_footer top_label'> <button type=\"submit\" id=\"gform_submit_button_2453\" class=\"gform_button button\" onclick=\"gform.submission.handleButtonClick(this);\" data-submission-type=\"submit\"><span class=\"gform_submit_button__text\">Submit Now<\/span><\/button> <input type='hidden' name='gform_ajax' value='form_id=2453&amp;title=&amp;description=&amp;tabindex=0&amp;theme=gravity-theme&amp;hash=ec2463697d0d9cef7b71236ae60964c7' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submission_method' data-js='gform_submission_method_2453' value='iframe' \/>\n            <input type='hidden' class='gform_hidden' name='gform_theme' data-js='gform_theme_2453' id='gform_theme_2453' value='gravity-theme' \/>\n            <input type='hidden' class='gform_hidden' name='gform_style_settings' data-js='gform_style_settings_2453' id='gform_style_settings_2453' value='' \/>\n            <input type='hidden' class='gform_hidden' name='is_submit_2453' value='1' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submit' value='2453' \/>\n            \n            <input type='hidden' class='gform_hidden' name='gform_currency' data-currency='GBP' value='ZQkPeSQsFNwVf9EbrgU6uYeheNRT4Kc9W0pPZICvPFKP1ewt5vzMnGAbVxV5uX5zV0GraKva+3gzKloW0bwPlkwhJDLaRv7zoJLwXM6H8QLjghQ=' \/>\n            <input type='hidden' class='gform_hidden' name='gform_unique_id' value='' \/>\n            <input type='hidden' class='gform_hidden' name='state_2453' value='WyJ7XCIxNFwiOltcIjIyODY0N2ViMWU3NTcxZjA4YTY4NGJmMDcwMTk3Y2I0XCIsXCJiMzk3YmQ1MDBmMmFjNjk1ODE4MzdmNTBhYTA2MzQ0OFwiLFwiNGYyNGZkZGEwMzlkNDUxMWFhZGE1NGYwZmQwZmNiZTdcIixcIjUyMmJkMDE2M2I2ZmEwOTI3NDZhZjU5YTg0ZmM1NDk5XCIsXCIzODRlNjk1YjQxMTAzMWFiYmQ2ODEyMGYyZWFhMDYyNlwiLFwiYjkzNDcwNTE2MjkxOGRjZWViMjQzNzRjNmE0NGVmNTlcIixcIjQxMTliODZhMzVjYzJiMWViNDZiMmQ4NjRlNGUzZmNjXCJdfSIsIjQ3MjNiMzA2ZDIyZGVkODA2N2YyMjYyOThkYzI1ODVmIl0=' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_target_page_number_2453' id='gform_target_page_number_2453' value='0' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_source_page_number_2453' id='gform_source_page_number_2453' value='1' \/>\n            <input type='hidden' name='gform_field_values' value='' \/>\n            \n        <\/div>\n                        <\/form>\n                        <\/div>\n\t\t                <iframe style='display:none;width:0px;height:0px;' src='about:blank' name='gform_ajax_frame_2453' id='gform_ajax_frame_2453' title='This iframe contains the logic required to handle Ajax powered Gravity Forms.'><\/iframe>\n\t\t                <script>\ngform.initializeOnLoaded( function() {gformInitSpinner( 2453, 'https:\/\/legalvision.co.uk\/wp-content\/themes\/legalv-v6\/img\/spinner.svg', true );jQuery('#gform_ajax_frame_2453').on('load',function(){var contents = jQuery(this).contents().find('*').html();var is_postback = contents.indexOf('GF_AJAX_POSTBACK') >= 0;if(!is_postback){return;}var form_content = jQuery(this).contents().find('#gform_wrapper_2453');var is_confirmation = jQuery(this).contents().find('#gform_confirmation_wrapper_2453').length > 0;var is_redirect = contents.indexOf('gformRedirect(){') >= 0;var is_form = form_content.length > 0 && ! is_redirect && ! is_confirmation;var mt = parseInt(jQuery('html').css('margin-top'), 10) + parseInt(jQuery('body').css('margin-top'), 10) + 100;if(is_form){form_content.find('form').css('opacity', 0);jQuery('#gform_wrapper_2453').html(form_content.html());if(form_content.hasClass('gform_validation_error')){jQuery('#gform_wrapper_2453').addClass('gform_validation_error');} else {jQuery('#gform_wrapper_2453').removeClass('gform_validation_error');}setTimeout( function() { \/* delay the scroll by 50 milliseconds to fix a bug in chrome *\/ jQuery(document).scrollTop(jQuery('#gform_wrapper_2453').offset().top - mt); }, 50 );if(window['gformInitDatepicker']) {gformInitDatepicker();}if(window['gformInitPriceFields']) {gformInitPriceFields();}var current_page = jQuery('#gform_source_page_number_2453').val();gformInitSpinner( 2453, 'https:\/\/legalvision.co.uk\/wp-content\/themes\/legalv-v6\/img\/spinner.svg', true );jQuery(document).trigger('gform_page_loaded', [2453, current_page]);window['gf_submitting_2453'] = false;}else if(!is_redirect){var confirmation_content = jQuery(this).contents().find('.GF_AJAX_POSTBACK').html();if(!confirmation_content){confirmation_content = contents;}jQuery('#gform_wrapper_2453').replaceWith(confirmation_content);jQuery(document).scrollTop(jQuery('#gf_2453').offset().top - mt);jQuery(document).trigger('gform_confirmation_loaded', [2453]);window['gf_submitting_2453'] = false;wp.a11y.speak(jQuery('#gform_confirmation_message_2453').text());}else{jQuery('#gform_2453').append(contents);if(window['gformRedirect']) {gformRedirect();}}jQuery(document).trigger(\"gform_pre_post_render\", [{ formId: \"2453\", currentPage: \"current_page\", abort: function() { this.preventDefault(); } }]);        if (event && event.defaultPrevented) {                return;        }        const gformWrapperDiv = document.getElementById( \"gform_wrapper_2453\" );        if ( gformWrapperDiv ) {            const visibilitySpan = document.createElement( \"span\" );            visibilitySpan.id = \"gform_visibility_test_2453\";            gformWrapperDiv.insertAdjacentElement( \"afterend\", visibilitySpan );        }        const visibilityTestDiv = document.getElementById( \"gform_visibility_test_2453\" );        let postRenderFired = false;        function triggerPostRender() {            if ( postRenderFired ) {                return;            }            postRenderFired = true;            gform.core.triggerPostRenderEvents( 2453, current_page );            if ( visibilityTestDiv ) {                visibilityTestDiv.parentNode.removeChild( visibilityTestDiv );            }        }        function debounce( func, wait, immediate ) {            var timeout;            return function() {                var context = this, args = arguments;                var later = function() {                    timeout = null;                    if ( !immediate ) func.apply( context, args );                };                var callNow = immediate && !timeout;                clearTimeout( timeout );                timeout = setTimeout( later, wait );                if ( callNow ) func.apply( context, args );            };        }        const debouncedTriggerPostRender = debounce( function() {            triggerPostRender();        }, 200 );        if ( visibilityTestDiv && visibilityTestDiv.offsetParent === null ) {            const observer = new MutationObserver( ( mutations ) => {                mutations.forEach( ( mutation ) => {                    if ( mutation.type === 'attributes' && visibilityTestDiv.offsetParent !== null ) {                        debouncedTriggerPostRender();                        observer.disconnect();                    }                });            });            observer.observe( document.body, {                attributes: true,                childList: false,                subtree: true,                attributeFilter: [ 'style', 'class' ],            });        } else {            triggerPostRender();        }    } );} );\n<\/script>\n<\/div>\n<\/div>\n<div id=\"content-next\"><!-- scroll anchor --><\/div>\n<h2 class=\"wp-block-heading\">What Businesses Should Do Now<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Review PECR compliance<\/strong>: With the significantly higher penalties, ensure your direct marketing practices fully comply with PECR requirements.<\/li>\n\n\n\n<li><strong>Update privacy policies<\/strong>: Check if the new legitimate interests examples apply to your processing and update your documentation accordingly.<\/li>\n\n\n\n<li><strong>Assess children&#8217;s services<\/strong>: If your online services might be accessed by children, review your privacy-by-design measures and consider adding further protections.<\/li>\n\n\n\n<li><strong>Review automated systems<\/strong>: Verify that your automated decision-making processes comply with the new requirements and implement the necessary safeguards.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Key Takeaways<\/h2>\n\n\n\n<p>While the DUAA does not overhaul UK data protection law, it introduces important adjustments you must consider. The alignment of PECR penalties with UK GDPR levels is particularly significant and should prompt you to carefully review your direct marketing compliance. Assess your current practices against these new requirements and seek professional advice if needed to ensure ongoing compliance.<\/p>\n\n\n\n<p>If you are a business owner looking to understand the impact of the DUAA on your data practices, our experienced <a href=\"https:\/\/legalvision.co.uk\/services\/data-privacy-it-lawyers\/\">Data, Privacy and IT Lawyers<\/a> can assist you as part of our LegalVision membership. For a low monthly fee, you will have unlimited access to lawyers who can answer your questions and draft and review your documents. Call us today at <a href=\"tel:+448081968584\" class=\"AVANSERnumber dynamic-number\">0808 196 8584<\/a> or visit our <a href=\"https:\/\/legalvision.co.uk\/membership\/\">membership page<\/a>.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Frequently Asked Questions<\/h2>\n\n\n\n<p><strong>What is the new legitimate interests rule?<\/strong><\/p>\n\n\n\n<p>The DUAA provides clearer guidance on when businesses can use &#8220;recognised legitimate interests&#8221; for data processing.<\/p>\n\n\n\n<p><strong>What should businesses do with children&#8217;s online data?<\/strong><\/p>\n\n\n\n<p>Businesses must ensure that children\u2019s data is protected and consider their specific online needs.<\/p>\n\n\n\n\n<div class=\"not-prose m-feedback-prompt\">\n    <!-- Thumbs up\/down bar -->\n    <div class=\"m-feedback-prompt__main\">\n        <div class=\"m-feedback-prompt__title\">Was this article helpful?<\/div>\n        <div>\n            <!--span class=\"m-feedback-prompt__button--text\">Thanks!<\/span-->\n            <button type=\"button\" class=\"m-feedback-prompt__button m-feedback-prompt__button--yes\"\n                    data-analytics-link=\"feedback-prompt:yes\" aria-label=\"Agree\">\n                <i class=\"fa-regular fa-thumbs-up fa-3x\"><\/i>\n            <\/button>\n            <button type=\"button\" class=\"m-feedback-prompt__button m-feedback-prompt__button--no\"\n                    data-analytics-link=\"feedback-prompt:no\" aria-label=\"Disagree\">\n                <i class=\"fa-regular fa-thumbs-down fa-3x\"><\/i>\n            <\/button>\n        <\/div>\n    <\/div>\n\n    <!-- Feedback form -->\n    <div class=\"m-feedback-prompt__form\">\n        <div class=\"m-feedback-prompt__form--thanks \">\n            <div>Thanks!<\/div>\n            <p>\n                We appreciate your feedback \u2013 your submission has been successfully received.            <\/p>\n        <\/div>\n        <form id=\"contact-form\" class=\"m-feedback-prompt__form--form\" action=\"\" method=\"post\">\n            <input type=\"hidden\" id=\"authenticity_token\" name=\"authenticity_token\" value=\"9eb4f72322\" \/><input type=\"hidden\" name=\"_wp_http_referer\" value=\"\/api\/wp\/v2\/posts\/193985\" \/>            <input value=\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/\" type=\"hidden\" name=\"currenturl\"\n                   id=\"currenturl\">\n            <input value=\"Data Use and Access Act 2025: Key Privacy Law Changes for UK Businesses\" type=\"hidden\" name=\"currenttitle\"\n                   id=\"currenttitle\">\n            <label>\n                <!-- display on thumbs-up -->\n                <span class=\"m-feedback-prompt__feedback m-feedback-prompt__feedback--yes\">\n                    Can you tell us <span class=\"font-semibold\">why<\/span> you found it helpful?\n                <\/span>\n\n                <!-- display on thumbs-down -->\n                <span class=\"m-feedback-prompt__feedback m-feedback-prompt__feedback--no text-lg\">\n                    How can we better improve this article?\n                <\/span>\n                <textarea name=\"feedbackmessage\" id=\"feedbackmessage\" required><\/textarea>\n            <\/label>\n\n            <div class=\"m-feedback-prompt__form--error\" id=\"form-submit-error\"><\/div>\n            <button id=\"submit-contact-form-button\" type=\"submit\" name=\"commit\" class=\"m-feedback-prompt__form--submit\"\n                    data-analytics-link=\"feedback-prompt:submit\">\n                Submit            <\/button>\n        <\/form>\n    <\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>The new Data Use and Access Act 2025 (DUAA) changes how businesses in the UK handle personal data. As a business owner, understanding these updates is crucial due to their broad impact, from handling customer information to marketing your products and services. The new Act amends existing legislation and carries serious consequences for non-compliance. This<a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/\">Continue reading <span class=\"sr-only\">&#8220;Data Use and Access Act 2025: Key Privacy Law Changes for UK Businesses&#8221;<\/span><\/a><\/p>\n","protected":false},"author":13203,"featured_media":3163,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","editor_notices":[],"footnotes":""},"categories":[27],"tags":[382,495,1246,2483,2484],"class_list":["post-193985","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-privacy-it","tag-privacy","tag-data","tag-smb","tag-law-reform","tag-privacy-law"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Data Use and Access Act 2025: Key Privacy Law Changes | LegalVision UK<\/title>\n<meta name=\"description\" content=\"This article highlights the key changes that small and medium-sized businesses in the UK need to be aware of. Find out more.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Data Use and Access Act 2025: Key Privacy Law Changes | LegalVision UK\" \/>\n<meta property=\"og:description\" content=\"This article highlights the key changes that small and medium-sized businesses in the UK need to be aware of. Find out more.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/\" \/>\n<meta property=\"og:site_name\" content=\"LegalVision UK\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/LegalVision\" \/>\n<meta property=\"article:published_time\" content=\"2025-06-27T01:31:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-30T23:50:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121804\/business-image-0522104.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"986\" \/>\n\t<meta property=\"og:image:height\" content=\"554\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Olivia O&#039;Rourke\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@LegalVision_law\" \/>\n<meta name=\"twitter:site\" content=\"@LegalVision_law\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Olivia O&#039;Rourke\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/\"},\"author\":{\"name\":\"Olivia O'Rourke\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/f61703f60b4c161919f5c2fe326db1c0\"},\"headline\":\"Data Use and Access Act 2025: Key Privacy Law Changes for UK Businesses\",\"datePublished\":\"2025-06-27T01:31:23+00:00\",\"dateModified\":\"2025-06-30T23:50:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/\"},\"wordCount\":1094,\"image\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121804\/business-image-0522104.jpg\",\"keywords\":[\"privacy\",\"data\",\"SMB\",\"law reform\",\"privacy law\"],\"articleSection\":[\"Data, Privacy and IT Articles\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/\",\"url\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/\",\"name\":\"Data Use and Access Act 2025: Key Privacy Law Changes | LegalVision UK\",\"isPartOf\":{\"@id\":\"https:\/\/legalvision.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121804\/business-image-0522104.jpg\",\"datePublished\":\"2025-06-27T01:31:23+00:00\",\"dateModified\":\"2025-06-30T23:50:20+00:00\",\"author\":{\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/f61703f60b4c161919f5c2fe326db1c0\"},\"description\":\"This article highlights the key changes that small and medium-sized businesses in the UK need to be aware of. Find out more.\",\"breadcrumb\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/#primaryimage\",\"url\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121804\/business-image-0522104.jpg\",\"contentUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121804\/business-image-0522104.jpg\",\"width\":986,\"height\":554,\"caption\":\"Data Use and Access Act 2025: Key Privacy Law Changes | LegalVision UK\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/legalvision.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Data, Privacy and IT Articles\",\"item\":\"https:\/\/legalvision.co.uk\/category\/data-privacy-it\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Data Use and Access Act 2025: Key Privacy Law Changes for UK Businesses\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/legalvision.co.uk\/#website\",\"url\":\"https:\/\/legalvision.co.uk\/\",\"name\":\"LegalVision UK\",\"description\":\"LegalVision is a commercial law firm in the UK with a commitment to innovation\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/legalvision.co.uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/f61703f60b4c161919f5c2fe326db1c0\",\"name\":\"Olivia O'Rourke\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/04\/Olivia-2464-scaled-e1714435355715-96x96.jpg\",\"contentUrl\":\"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/04\/Olivia-2464-scaled-e1714435355715-96x96.jpg\",\"caption\":\"Olivia O'Rourke\"},\"description\":\"Olivia is a Senior Associate in LegalVision's Corporate and Commercial team. She specialises in commercial, corporate and privacy law, and enjoys working with clients to help them achieve a commercial outcome. Olivia graduated from the University of Technology Sydney with degrees in Law and Business. She has experience working in in-house legal teams at a national sporting body and an online fashion retailer prior to joining LegalVision in 2020.\u00a0\",\"url\":\"https:\/\/legalvision.co.uk\/author\/olivia-orourkelegalvision-com-au\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Data Use and Access Act 2025: Key Privacy Law Changes | LegalVision UK","description":"This article highlights the key changes that small and medium-sized businesses in the UK need to be aware of. Find out more.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/","og_locale":"en_GB","og_type":"article","og_title":"Data Use and Access Act 2025: Key Privacy Law Changes | LegalVision UK","og_description":"This article highlights the key changes that small and medium-sized businesses in the UK need to be aware of. Find out more.","og_url":"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/","og_site_name":"LegalVision UK","article_publisher":"https:\/\/www.facebook.com\/LegalVision","article_published_time":"2025-06-27T01:31:23+00:00","article_modified_time":"2025-06-30T23:50:20+00:00","og_image":[{"width":986,"height":554,"url":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121804\/business-image-0522104.jpg","type":"image\/jpeg"}],"author":"Olivia O'Rourke","twitter_card":"summary_large_image","twitter_creator":"@LegalVision_law","twitter_site":"@LegalVision_law","twitter_misc":{"Written by":"Olivia O'Rourke","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/#article","isPartOf":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/"},"author":{"name":"Olivia O'Rourke","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/f61703f60b4c161919f5c2fe326db1c0"},"headline":"Data Use and Access Act 2025: Key Privacy Law Changes for UK Businesses","datePublished":"2025-06-27T01:31:23+00:00","dateModified":"2025-06-30T23:50:20+00:00","mainEntityOfPage":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/"},"wordCount":1094,"image":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/#primaryimage"},"thumbnailUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121804\/business-image-0522104.jpg","keywords":["privacy","data","SMB","law reform","privacy law"],"articleSection":["Data, Privacy and IT Articles"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/","url":"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/","name":"Data Use and Access Act 2025: Key Privacy Law Changes | LegalVision UK","isPartOf":{"@id":"https:\/\/legalvision.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/#primaryimage"},"image":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/#primaryimage"},"thumbnailUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121804\/business-image-0522104.jpg","datePublished":"2025-06-27T01:31:23+00:00","dateModified":"2025-06-30T23:50:20+00:00","author":{"@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/f61703f60b4c161919f5c2fe326db1c0"},"description":"This article highlights the key changes that small and medium-sized businesses in the UK need to be aware of. Find out more.","breadcrumb":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/#primaryimage","url":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121804\/business-image-0522104.jpg","contentUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2022\/05\/24121804\/business-image-0522104.jpg","width":986,"height":554,"caption":"Data Use and Access Act 2025: Key Privacy Law Changes | LegalVision UK"},{"@type":"BreadcrumbList","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/data-use-access-act-2025\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/legalvision.co.uk\/"},{"@type":"ListItem","position":2,"name":"Data, Privacy and IT Articles","item":"https:\/\/legalvision.co.uk\/category\/data-privacy-it\/"},{"@type":"ListItem","position":3,"name":"Data Use and Access Act 2025: Key Privacy Law Changes for UK Businesses"}]},{"@type":"WebSite","@id":"https:\/\/legalvision.co.uk\/#website","url":"https:\/\/legalvision.co.uk\/","name":"LegalVision UK","description":"LegalVision is a commercial law firm in the UK with a commitment to innovation","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/legalvision.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/f61703f60b4c161919f5c2fe326db1c0","name":"Olivia O'Rourke","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/image\/","url":"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/04\/Olivia-2464-scaled-e1714435355715-96x96.jpg","contentUrl":"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/04\/Olivia-2464-scaled-e1714435355715-96x96.jpg","caption":"Olivia O'Rourke"},"description":"Olivia is a Senior Associate in LegalVision's Corporate and Commercial team. She specialises in commercial, corporate and privacy law, and enjoys working with clients to help them achieve a commercial outcome. Olivia graduated from the University of Technology Sydney with degrees in Law and Business. She has experience working in in-house legal teams at a national sporting body and an online fashion retailer prior to joining LegalVision in 2020.\u00a0","url":"https:\/\/legalvision.co.uk\/author\/olivia-orourkelegalvision-com-au\/"}]}},"_links":{"self":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/193985","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/users\/13203"}],"replies":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/comments?post=193985"}],"version-history":[{"count":5,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/193985\/revisions"}],"predecessor-version":[{"id":193996,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/193985\/revisions\/193996"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/media\/3163"}],"wp:attachment":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/media?parent=193985"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/categories?post=193985"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/tags?post=193985"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}