The Data (Use and Access) Act 2025 (DUAA) makes several important updates to UK data protection law. It does not replace the UK GDPR or the Data Protection Act 2018 — instead, it builds on both frameworks, simplifying certain requirements while introducing some new obligations.
These changes are relevant to you and your practice, and we want to make sure you have everything you need to stay compliant with confidence.
We have updated our resources and prepared a clear guide to the key changes, available exclusively to AoR Members in the members area.
Action required: Please visit the GDPR page in the members area to review the guide and ensure you and your business are up to date.
