- Made under
- Data Use and Access Act 2025
- Enforced by
- ICO
- Status
- In Force
What it defines
Regulations creating concrete business duties or carrying penalties, grouped as the instrument is structured. Titles link to the source text — blue means you’re leaving for legislation.gov.uk.
12 other provisions — procedural and definitional
s.001
Citation and interpretation
s.002
Provisions of the 2025 Act coming into force on 5th February 2026
s.003
Provisions of the 2025 Act coming into force on 19th June 2026
s.004
Savings provisions relating to section 76 (time limits for responding to data subjects’ requests)
s.005
Saving provision relating to section 80 and Schedule 6 (automated decision-making)
s.006
Saving provision relating to section 101 (penalty notices)
s.007
Transitional provision relating to section 103 and Schedule 10 (complaints by data subjects)
s.008
Transitional provision relating to section 115 and Schedule 13 (Commissioner’s enforcement powers): investigatory powers
s.009
Saving provision for exercise of powers begun under the PEC Regulations before 5th February 2026
s.010
Saving provision for audits begun under regulations 5 and 5B of the PEC Regulations before 5th February 2026
s.011
Transitional and savings provisions for enforcement action
s.012
Amendment of the 2018 Act
Help complying
Guvnor’s practical routes through this instrument.
1 more guide that reference this instrument
Connected legislation
The wider family of instruments made under the same parent Act.
Duty extraction and severity labels are Guvnor’s analysis of the instrument, not the instrument itself. Always verify against the linked source text.