The Data (Use and Access) Act | Insights

On 19 June 2025 the Data (Use and Access) Act (the "DUA Act") received Royal Assent and became law in the UK, having been passed by the UK Parliament on 11 June 2025.

In these articles we discuss how the DUA Act principally reforms the General Data Protection Regulation in the UK (the "UK GDPR") and the Privacy and Electronic Communications Regulations 2003 ("PECR"). PECR is the law in the UK that governs the use of cookies and other online tracking technologies, as well as the rules on electronic marketing communications.

Additionally, the articles discuss the current position in the UK on copyright issues related to generative AI.

Reform of the GDPR in the UK

This article focuses on the changes that the DUA Act makes to the UK GDPR.

PECR Reform: Rules relating to Electronic Marketing and Cookies in the UK

This article focuses on the changes that the DUA Act makes to PECR, the laws in the UK that govern the use of cookies and other online tracking technologies, as well as the rules on electronic marketing communications.