UK Statutory Instrument 2026 United Kingdom

DUAA 2025 (Commencement No. 6) Regulations 2026

View on legislation.gov.uk (opens in a new tab) Ask Guv about this Act

At a glance

Enforced by

ICO

What's here

1 practical guide · 1 journey

Step-by-step journeys using this legislation

Walkthroughs that take you from a real business situation to compliance.

Relevant guidance

Practical guides for businesses affected by this Act, ordered by how closely they engage with it.

Mentioned in related content

1 guides

What this Act requires

Sections that create concrete duties on businesses or carry penalties. Procedural and definitional sections are folded into the “Browse other sections” expander at the bottom of each group. Click any section title to read the source text on legislation.gov.uk.

Browse 12 other sections — procedural / definitional / commencement
s.001

Citation and interpretation

s.002

Provisions of the 2025 Act coming into force on 5th February 2026

s.003

Provisions of the 2025 Act coming into force on 19th June 2026

s.004

Savings provisions relating to section 76 (time limits for responding to data subjects’ requests)

s.005

Saving provision relating to section 80 and Schedule 6 (automated decision-making)

s.006

Saving provision relating to section 101 (penalty notices)

s.007

Transitional provision relating to section 103 and Schedule 10 (complaints by data subjects)

s.008

Transitional provision relating to section 115 and Schedule 13 (Commissioner’s enforcement powers): investigatory powers

s.009

Saving provision for exercise of powers begun under the PEC Regulations before 5th February 2026

s.010

Saving provision for audits begun under regulations 5 and 5B of the PEC Regulations before 5th February 2026

s.011

Transitional and savings provisions for enforcement action

s.012

Amendment of the 2018 Act

Enforcement and responsible bodies

The regulators that administer or enforce this legislation.

ICO

Information Commissioner's Office

Data protection, freedom of information, privacy and electronic communications regulation. Enforces UK GDPR and Data Protection Act 2018. Issues fines for breaches. …

Connected legislation

parent Act

These instruments amend, apply, or refer to this Act. They may not all create direct business obligations.

Made under

Data Use and Access Act 2025 2025 Primary Act

Explore more

Browse legislation

Find other UK business legislation with related guidance.

Regulators

Learn more about the bodies that enforce this legislation.