Data (Use and Access) Act 2025
What is Data (Use and Access) Act 2025?
The Data (Use and Access) Act 2025 amends and supplements the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003. It introduces new rules on data sharing, access, and use, aiming to facilitate responsible data use while maintaining strong privacy protections.. It comprises 38 controls organised across 7 domains, and applies in the United Kingdom.
How Data (Use and Access) Act 2025 maps to other frameworks
All 38 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 7 domains Data (Use and Access) Act 2025 groups its controls into
Frameworks that share controls with Data (Use and Access) Act 2025
Each of these has at least one control mapped to a control in Data (Use and Access) Act 2025. The number is how many Data (Use and Access) Act 2025 controls are shared, counted from the mapping graph.
Implementation guides for frameworks that overlap Data (Use and Access) Act 2025
Where Data (Use and Access) Act 2025 overlaps with the standards you already hold
Where to get trained on Data (Use and Access) Act 2025
One course in the catalogue covers Data (Use and Access) Act 2025 directly. Each is self-paced, includes the downloadable toolkit and the implementation playbook, and carries a certificate of completion.
Training more than one person? Ten seats of any course is $1,490 on a single licence, against $199 a seat bought one at a time.
What an auditor will ask you for
All 18 Data (Use and Access) Act 2025 controls, each with what it requires, the artefacts an auditor will ask you for, and where it commonly fails. Free to read, nothing to fill in.
Read the Data (Use and Access) Act 2025 evidence request listWhat Data (Use and Access) Act 2025 means in your sector
What Data (Use and Access) Act 2025 means for your job
Questions people ask about Data (Use and Access) Act 2025
What is Data?
How many controls does Data have?
Where does Data apply?
What frameworks does Data map to?
How do I get started with Data compliance?
Query Data (Use and Access) Act 2025 programmatically
Data (Use and Access) Act 2025, its 38 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
Data (Use and Access) Act 2025 API reference and MCP config →What Data (Use and Access) Act 2025 requires, control by control
Each page carries the requirement text for one Data (Use and Access) Act 2025 control and what an assessor expects to see as evidence.
- DUAA-P5-ADM Automated decision-making reforms
- DUAA-P5-CHILDREN Children's data protection by design (ISS)
- DUAA-P5-DSR Data subject access requests (reasonable and proportionate searches)
- DUAA-P5-LAWFUL Lawful processing and recognised legitimate interests
- DUAA-P5-TRANSFERS International transfers data protection test
How ready are you for Data (Use and Access) Act 2025?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.