#DUAAct
LightNews LightNews
owenboswarva.bsky.social
Blink and you'll miss it: Royal Assent to the UK's Data (Use and Access) Act Bill – now the Data (Use and Access) Act 2025 – announced in the House of Lords this morning www.parliamentlive.tv/Event/Index/... (from 11.06am)

Docs bills.parliament.uk/bills/3825

#DUABill #DUAAct #dataprotection etc.
June 19, 2025 at 12:08 PM
ismsonline.bsky.social
The UK government’s Data (Use and Access) Act (#DUAAct) has received Royal Assent, bringing with it a host of changes to the UK’s #DataProtection regulatory landscape. Phil Muncaster discusses what these changes mean for security and #Compliance teams:
July 3, 2025 at 11:02 AM
owenboswarva.bsky.social
Post from Bird & Bird with unofficial Keeling Schedules showing changes to UK GDPR, DPA 2018 and PECR in the Data (Use and Access) Act 2025 www.twobirds.com/en/insights/... 👏

(The UK Government has so far failed to publish official Keeling Schedules.)

#DUAAct #DataBill #dataprotection etc.
July 13, 2025 at 2:10 PM
anthonymagee.com
🇬🇧 New UK data law shifts from “privacy at any cost” → “responsible enablement.”

🤝 But trust stays fragile.

🔎 Data’s about people, not systems.

My thoughts here:

www.linkedin.com/pulse/beyond...

#Data #Trust #Privacy #DUAAct #DigitalRights @data.ft.com
Beyond compliance: how new data laws might redraw the digital map for charities, businesses and tech giants
On 19 June 2025, the Data (Use and Access) Act 2025 (the “DUA Act”) received Royal Assent. The UK Government’s ambition is clear: To enhance the UK’s digital strategy and unlock the use of data, harne...
www.linkedin.com
June 27, 2025 at 10:50 AM
owenboswarva.bsky.social
Letter from DSIT Secretary Peter Kyle confirming that in enacting the Data (Use and Access) Act the UK Parliament has effectively legislated in certain devolved policy areas without the consent of the Northern Ireland Assembly committees.parliament.uk/publications...

#DUAAct #smartdata #devolution
In this instance, the UK Government has only legislated without consent based on assurances from the Executive that there were no policy concerns with any of the transferred matters, and that it had recommended the Assembly provide its consent to the Act - as set out in the draft legislative consent memorandum laid before the Assembly. It is important that the provisions apply in Northern Ireland so that the benefits can be felt by the people of Northern Ireland, and so that the legislation is clear. It would not be right if, simply because of a process issue, the people of Northern Ireland could not benefit from smart data schemes like Open Banking and those schemes had to operate differently in different parts of the UK. Similarly, it would not be right if roadworks in Northern Ireland were not made safer and more efficient by NUAR; nor if public service delivery was not improved by the amendment to the Digital Economy Act.
June 25, 2025 at 7:23 PM
owenboswarva.bsky.social
I can't believe this nonsense is still going around. The Data Bill proposes nothing of the kind; it makes no changes to UK law on AI or copyright.

Will AI put fiction writers out of work? www.ft.com/content/7ce8... (£) in the @financialtimes.com

#DUAAct #genAI #IPlaw #techpolicy
Hall is despairing of the British government's approach to regulating AI companies, and what she sees as its failure to protect the rights of authors. The UK's Data (Use and Access) Bill — which was finally passed in June after months of parliamentary wrangling — proposes that AI companies should have access to all creative content unless the creator opts out.
August 2, 2025 at 7:29 AM
owenboswarva.bsky.social
Consultation on regulations to require the recording and uploading of asset information to the National Underground Asset Register (NUAR) www.gov.uk/government/c... (England, Northern Ireland, Wales)

Consultation from GDS, building out OS's geospatial empire.

#DUAAct #datasharing not- #opendata
The initial tranche of NUAR regulations, as covered in Parts 1-3 of this consultation, will update existing duties and introduce new requirements on undertakers who own and maintain apparatus in the street to keep records of specified information about their apparatus. The regulations will implement a new minimum information specification to ensure that a comprehensive baseline of the necessary information to inform street works is collected moving forwards. The regulations will establish requirements for undertakers to upload information about their apparatus to NUAR and ensure that this remains up to date whenever changes occur, for example during installation or maintenance. To ensure this information is made available for the purposes of street works excavation, the regulations would grant access to information held in NUAR for undertakers and authorised contractors working on their behalf in England, Wales, and Northern Ireland. These regulations are necessary to ensure NUAR has comprehensive and up to date information to support those undertaking street works to carry out their work safely and efficiently.
August 6, 2025 at 11:35 AM
owenboswarva.bsky.social
Smart Data opportunities in digital markets www.gov.uk/government/c... call for evidence from the UK's Department for Science, Innovation and Technology (DSIT), rather vaguely seeking views on "whether and how to introduce a #SmartData scheme in #digitalmarkets"

#DUAAct #datasharing #dataprotection
Smart Data enables the secure, consent-based sharing of customer and business data with authorised third parties. This will allow for the creation of innovative services that benefit consumers and support competition. Digital markets are central to how individuals and businesses access goods, services, and content online. However, barriers to data portability, limited consumer control, and market concentration can reduce competition and limit innovation. A Smart Data scheme could help address these issues by enabling consumers and businesses to make better use of their data and supporting the development of new data-driven products and services. This call for evidence will help the government assess whether there is a case for action in this area, and if so, how a scheme might be designed to deliver meaningful outcomes.
July 28, 2025 at 3:06 PM
owenboswarva.bsky.social
UK AI copyright report reveals little progress www.pinsentmasons.com/out-law/news...

The Guardian burble version:

Boost for artists in AI copyright battle as only 3% back UK active opt-out plan www.theguardian.com/technology/2...

#DUAAct #genAI #IPlaw #openweb #techpolicy
Cerys Wyn Davies of Pinsent Masons said: "The government is trying to tread a very fine line with its attempts to balance the respective interests of the creative industries and AI developers. It has put a great deal of onus on the two different sides not only reaching a form of consensus on issues that have to-date been highly polarising, but on them finding new solutions to technical problems that might constrain how any new policy on AI and copyright in the UK is implemented in practice." "I understand there has been some progress made on technical solutions that would enable content creators to exercise an effective opt-out of their works from AI training, but there are remaining questions over the cost and administrative burdens associated. On licensing too, the UK's Copyright Licensing Agency claims to have developed a ready-made solution – if the government were to insist on its use. In relation to transparency, it remains to be seen how granular any new UK duties are made. In the EU, policymakers have suggested that AI developers do not need to disclose 'the details for the specific data and works used to train the model' to meet copyright-related disclosure obligations arising under the EU AI Act," she said.
December 17, 2025 at 2:49 PM
owenboswarva.bsky.social
Part-time job – Information Commission Non-Executive Members (7 roles) apply-for-public-appointment.service.gov.uk/roles/8609

The Information Commission will be established by the Data (Use and Access) Act 2025 to replace the ICO as the UK's data regulator.

#DUAAct #dataprotection (also #FOI etc.)
The ICO is undergoing an exciting transformation. The Data (Use and Access) Act 2025 will modernise the ICO's governance framework to ensure it is fit for purpose, suitable to its role and remit, and relevant to the rapidly evolving regulatory landscape. The Act will replace the ICO's governance model with a "body corporate" structure, called the Information Commission, governed by an independent board made up of non-executive members (including the Chair), alongside executive board members, including a Chief Executive Officer. The new model will spread the responsibilities of the Information Commissioner across a greater number of people, increasing the diversity and resilience of the regulator.
June 19, 2025 at 1:14 PM
adventim.bsky.social
PRESS RELEASE: Advent IM Expands Training Academy with New Data and Security Courses 📝

www.advent-im.co.uk/press-releas...

#AISecurity #DataProtection #DUAAct #DataUse #FOI #SARs #InformationSecurity
PRESS RELEASE: Advent IM Expands Training Academy with New Data and Security Courses | Advent IM
Advent IM launches new training in AI, data governance, FOIA, SAL, and SAR to boost compliance and security.
www.advent-im.co.uk
August 28, 2025 at 8:06 AM
owenboswarva.bsky.social
The legal case against Britain's new data regime the-european.eu/story-59883/... barrister Dr Raj Joshi on implementation of the UK's Data (Use and Access) Act 2025

#DUAAct #dataprotection #datasharing #datapolicy
One of the most controversial features of the Act is the broad power it gives the Secretary of State to amend core data protection rules through secondary legislation. These are commonly described as Henry VIII powers, a reference to the 1539 Statute of Proclamations, which allowed the Crown to legislate by proclamation. That approach sits uneasily with the requirement for legal clarity in any regime that interferes with privacy rights. In Liberty v United Kingdom, the European Court of Human Rights held that the UK's interception regime "did not indicate with sufficient clarity the scope or manner of exercise of the discretion conferred on the authorities". The Public Law Project therefore argues, with force, that powers of this breadth allow ministers to reshape privacy rights without meaningful parliamentary scrutiny.
April 26, 2026 at 8:24 AM
owenboswarva.bsky.social
Data Use and Access Research www.contractsfinder.service.gov.uk/Notice/ee2db... notice of £149,050 DSIT contract awarded to Ipsos Market Research

Specification is redacted of course

#DUAAct #PECR #dataprotection #opengov
A research project to evaluate the Data (Use and Access) Act 2025 (DUAA) and the Privacy and Electronic Communications Regulations 2003 (PECR). The project involves both compiling existing evidence, (literature reviews, and quantitative analysis) and novel research (interviews) to baseline the impact of DUAA's data protection reforms, and to conduct a post-implementation review of PECR. Outputs will be evaluation reports, Post Implementation Review, interview summaries, metrics for ongoing monitoring, and recommendations for future research.
December 20, 2025 at 8:25 PM
owenboswarva.bsky.social
DSIT summary of the UK Government's plans for bringing into force provisions in the Data (Use and Access) Act 2025 www.gov.uk/guidance/dat...

Initial commencement regulations www.legislation.gov.uk/uksi/2025/90...

#DUAAct #dataprotection #smartdata #digitalID etc.
July 25, 2025 at 1:02 PM
owenboswarva.bsky.social
The UK Government has published regs that will bring various sections of the Data (Use and Access) Act into force on 20 August 2025:

The Data (Use and Access) Act 2025 (Commencement No. 1) Regulations 2025 www.legislation.gov.uk/uksi/2025/90...

#DUAAct #dataprotection #smartdata
Commencement 2. The following provisions of the Act, so far as not already in force (see section 142(2)(h) of the Act), come into force on 20th August 2025— (a)Part 1 (access to customer data and business data); (b)section 72 (processing in reliance on relevant international law), except— (i)subsection (3), and (ii)subsection (7), to the extent that it refers to Article 8A(3)(e) in the insertion of section 9A (processing in reliance on relevant international law) in the Data Protection Act 2018; (c)section 74 (processing of special categories of personal data); (d)section 84 (law enforcement processing and codes of conduct); (e)section 91 (duties of the Commissioner in carrying out functions); (f)section 92 (codes of practice for the processing of personal data); (g)section 93 (codes of practice: panels and impact assessments); (h)section 95 (analysis of performance); (i)section 102 (annual report on regulatory action); (j)section 104 (court procedure in connection with subject access requests); (k)section 106 (protection of prohibitions, restrictions and data subject’s rights); (l)section 107 (regulations under the UK GDPR); (m)section 108 (further minor provision about data protection); (n)section 109 (the PEC Regulations); (o)section 110 (interpretation of the PEC Regulations), except subsection (2)(a) and (b) and subsection (3); (p)section 111 (duty to notify the Commissioner of personal data breach: time periods); (q)section 113 (emergency alerts: interpretation of time periods); (r)section 117 (the Information Commission), except subsection (4)(a); (s)section 125 (information for research about online safety matters); (t)section 129 (the eIDAS Regulation); (u)section 134 (time periods: the eIDAS Regulation and the EITSET Regulations); (v)section 135 (economic impact assessment); (w)section 136 (report on the use of copyright works in the development of AI systems); (x)section 137 (progress statement); …
July 24, 2025 at 5:34 PM
owenboswarva.bsky.social
Letter from DSIT minister Chris Bryant MP setting out UK Government's plan for implementing the Data (Use and Access) Act 2025 committees.parliament.uk/publications...

Royal Assent was 19 June.

The Act www.legislation.gov.uk/ukpga/2025/1...

#DUAAct #DataBill #dataprotection #digitalID #smartdata
We plan to commence the Act's provisions in four main stages: ● Stage 1, approximately two months after Royal Assent, will include the commencement of technical provisions which clarify aspects of the legal framework; and measures requiring the government to publish an impact assessment, a report and a progress update on AI and copyright issues. ● Stage 2, three to four months after Royal Assent, will include the commencement of the majority of the measures on Digital Verification Services in Part 2 of the Act; and the measures in Part 7 on the retention of information by providers of internet services in connection with the death of a child. ● Stage 3, approximately 6 months after Royal Assent, will include the commencement of the main changes to data protection legislation in Part 5 of the Act; and the provisions on information standards for health and adult social care in England in Part 7. ● Stage 4, more than 6 months after Royal Assent, will include the commencement of provisions that require a longer lead-in time. Examples include measures on the National Underground Register in Part 3; and the electronic system of registering births and deaths in Part 4 which rely on the appropriate technology being in place. Changes to ICO governance structures in Part 6 will take place once members of the new Board have been appointed. This is expected in early 2026. This is not a complete list of measures in the Act but is intended to illustrate our staged approach to commencement in the months ahead. Section 141 of the Act explains which provisions apply throughout the UK and which are limited to certain parts of the UK.
July 9, 2025 at 3:28 PM
owenboswarva.bsky.social
UK Government has reportedly descoped initial requirements for the statutory Fuel Finder #opendata scheme, following industry lobbying forecourttrader.co.uk/latest-news/... + www.acs.org.uk/news/fuel-av...

Context www.gov.uk/government/c...

#DUAAct #fuelprices #roadfuel #smartdata #transportdata
ACS has welcomed a letter from energy minister Dr Miatta Fahnbulleh MP, announcing that the requirement for retailers to report on their fuel availability as part of the upcoming Fuel Finder scheme will be postponed. The Government aims to launch the Fuel Finder scheme by the end of 2025. When the scheme is launched, retailers will be required to report on the retail prices of all types of petrol and diesel, as well as reporting on changes in those prices within 30 minutes. Under previous proposals, the scheme would also require retailers to report on when there is no availability of a fuel grade on their site.
June 25, 2025 at 4:25 PM
owenboswarva.bsky.social
Dear Meg, Caroline, Chi: letter from DSIT Secretary Peter Kyle to committee chairs, clarifying what the parliamentary working group on AI and copyright might involve; soz for any confusion committees.parliament.uk/publications...

#DUAAct #genAI #IPlaw #techpolicy

Previous correspondence below.
To answer some of the points in your letter specifically ahead of that meeting, it is not our intention for this to be a parliamentary group in the sense of being managed or resourced by parliament. We are open to suggestions, but our aim is for the group to be managed by DSIT, supported by officials and Ministers from both DSIT and DCMS, and to act as a channel for those members who have shown such a keen interest in this issue to remain engaged with Ministers and officials as we develop our thinking. In terms of drawing on the expertise from the Commons Science, Innovation and Technology and the Culture Media and Sport select committees, and the Lords Science and Technology and the Lords Communication and Digital committees, our hope is merely that we might seek your help in identifying members with either interest or expertise in this area, and that we might work with you initially to shape the group in a way that complements, rather than duplicates or undermines the valuable work already taking place in your committees.
June 24, 2025 at 6:32 PM
owenboswarva.bsky.social
AI and copyright: a post-Data Bill UK timeline into 2026 www.pinsentmasons.com/out-law/anal... from Pinsent Masons

Undertakings in the DUA Act www.legislation.gov.uk/ukpga/2025/1...

Pending consultation outcome www.gov.uk/government/c...

#DUAAct #genAI #IPlaw #techpolicy
Pinsent Masons infographic: "How UK AI copyright policy might develop: an indicative timeline"
June 20, 2025 at 7:01 PM
owenboswarva.bsky.social
There's now a fully linked HTML version of the UK's Data (Use and Access) Act 2025, which received Royal Assent yesterday www.legislation.gov.uk/ukpga/2025/1...

#DUABill #DUAAct #dataprotection #digitalID #smartdata etc.
June 20, 2025 at 5:31 PM
owenboswarva.bsky.social
Data (Use and Access) Act 2025 as passed by the UK Parliament www.legislation.gov.uk/ukpga/2025/18/ (PDF only so far)

Other docs bills.parliament.uk/bills/3825/p...

#DUABill #DUAAct #dataprotection #digitalID #smartdata etc.
June 20, 2025 at 10:48 AM
owenboswarva.bsky.social
UK organisations stand to benefit from new data protection laws ico.org.uk/about-the-ic...

Some info from the ICO now the Data (Use and Access) Act 2025 has received Royal Assent.

Would be good if DSIT had managed to organise publication of the Act itself, but hey-ho.

#DUAAct #dataprotection
June 19, 2025 at 4:23 PM