The Data (Use and Access) Act 2025 - What it means for your organisation

The Data (Use and Access) Act 2025 (DUAA) has brought the most significant changes to UK data protection since UK GDPR came into force. While it doesn't replace GDPR, the DPA 2018, or PECR, the DUAA reshapes how organisations process personal data, handle subject access, manage cookies, and apply legitimate interests. In this episode, we share highlights from our live webinar, where VinciWorks experts explained how these reforms affect compliance strategies. From broad consent in scientific research and recognised legitimate interests, to expanded cookie exemptions, stricter rules for children's services, and higher PECR fines, the DUAA introduces both opportunities and risks. Listen in to learn: What the DUAA changes — and what stays the same Updates to subject access rights and proportionality Cookie rules, soft opt-in for charities, and tougher PECR fines Automated decision-making and AI compliance under the DUAA The new "data protection test" for international transfers Practical steps to future-proof your compliance framework This episode is essential listening for data protection officers, compliance professionals, and legal teams preparing for the future of UK data protection.

You can listen to The Data (Use and Access) Act 2025 - What it means for your organisation online on Radio and Podcast. Open the player on this page to stream the available audio.

The Data (Use and Access) Act 2025 - What it means for your organisation is an episode from VinciWorks by VinciWorks.

This episode is 48:50 long.

This episode was published on Sep 10, 2025.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from VinciWorks when more episodes are available from the podcast feed.