UK GVT DPA (UK) 2018 Data Privacy

Published on: Sep 17, 2025

On Sep. 10, UK GVT issued updated version of the DPA (UK) 2018.

  • UK GVT commencement provisions on Data subjects’ rights to information: legal professional privilege exemption, National security exemption, Intelligence services.
  • See DPA (UK) 2018 S 43, 44, 45A, 51 (amended by D(UA)A 2025 (UK) S 79), DPA (UK) 2025 S 26(2)(f), 44, 45, 48, 68, 78A, 79, 110, 186 (amended by D(UA)A 2025 (UK) S 88), DPA (UK) 2018 S 82, 82A-82E (amended by D(UA)A 2025 (UK) S 89), DPA (UK) 2018 S 1, 29, 83, 84, 104, 202, 203, 206 (amended by D(UA)A 2025 (UK) S 90).
  • Follows, UK DSIT Sep. 2025 summary of commencing provisions of D(UA)A 2025 (UK), also issued Data (Use and Access) Act 2025 (Commencement No. 3 and Transitional and Saving Provisions) Regulations bring into force S 79, 88, 89, 90, see #230909.
  • Effectiveness
  • Amendments by S 79, 88 in force Sep. 5, 2025 (day after StIn 2025/996 were made).
  • Amendments by S 89, 90 in force Nov. 17, 2025.
Regulators
UK GVT
Entity Types
CNSM; Corp
Reference
DPA 2018, 9/10/2025' D(UA)A 2025 (UK)
Functions
Compliance; Financial; Legal; Operations; Privacy; Record Retention; Reporting; Risk; Technology
Countries
United Kingdom
Category
State
N/A
Products
AI; Corporate
Rule Type
Final
Regions
EMEA
Rule Date
Sep 10, 2025
Effective Date
Nov 17, 2025
Rule ID
268973
Linked to
N/A
Reg. Last Update
Sep 10, 2025
Report Section
UK