The Data (Use & Access) Act 2025 received royal Assent on 19th Jun 2025 and its main provisions came into effect on 5th Feb 2026, with last provisions to follow on 19th Jun 2026.

DUAA 2025 introduces a pro-innovation approach to data protection. For universities, it brings greater leeway to re-use data over related studies / broader research areas, rather than single studies. These changes in legal bases coverage can have direct impact on how researchers can and should design information for participants (participants information sheets, leaflets, consent forms). Changes are also introduced to the complaint route available to participants.