Data (Use and Access) Act 2025
What is Data (Use and Access) Act 2025?
The Data (Use and Access) Act 2025 amends and supplements the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003. It introduces new rules on data sharing, access, and use, aiming to facilitate responsible data use while maintaining strong privacy protections.. It comprises 18 controls organised across 7 domains, and applies in the United Kingdom.
How Data (Use and Access) Act 2025 maps to other frameworks
All 18 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 7 domains Data (Use and Access) Act 2025 groups its controls into
Frameworks that share controls with Data (Use and Access) Act 2025
Each of these has at least one control mapped to a control in Data (Use and Access) Act 2025. The number is how many Data (Use and Access) Act 2025 controls are shared, counted from the mapping graph.
Implementation guides for frameworks that overlap Data (Use and Access) Act 2025
Training on frameworks that overlap Data (Use and Access) Act 2025
There is no course on Data (Use and Access) Act 2025 itself. These cover frameworks that share controls with it, so the material carries across even though the standard named is different.
Where Data (Use and Access) Act 2025 overlaps with the standards you already hold
What Data (Use and Access) Act 2025 means in your sector
What Data (Use and Access) Act 2025 means for your job
Questions people ask about Data (Use and Access) Act 2025
What is Data?
How many controls does Data have?
Where does Data apply?
What frameworks does Data map to?
How do I get started with Data compliance?
Query Data (Use and Access) Act 2025 programmatically
Data (Use and Access) Act 2025, its 18 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
Data (Use and Access) Act 2025 API reference and MCP config →What Data (Use and Access) Act 2025 requires, control by control
Each page carries the requirement text for one Data (Use and Access) Act 2025 control and what an assessor expects to see as evidence.
- DUAA-P5-ADM Automated decision-making reforms
- DUAA-P5-CHILDREN Children's data protection by design (ISS)
- DUAA-P5-DSR Data subject access requests (reasonable and proportionate searches)
- DUAA-P5-LAWFUL Lawful processing and recognised legitimate interests
- DUAA-P5-TRANSFERS International transfers data protection test
How ready are you for Data (Use and Access) Act 2025?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.