It is rare for employers to receive genuinely positive news in the data protection sphere, but the Data (Use and Access) Act 2025 (DUAA) is a notable exception.
The DUAA aims to ease compliance burdens, introduce greater flexibility, and provide more practical options for managing data, without undermining the fundamental rights of individuals. In codifying and clarifying certain approaches to data protection compliance, the DUAA may enable employers to more confidently adopt proportionate, risk-based approaches to managing personal data.
Please see full publication below for more information.
