GDPR - Data Use, Access and Enforcement

The Data (Use and Access) Act 2025 received royal assent on 19^th June 2025. This legislation makes a series of changes to the UK GDPR, Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003. Some changes are already in force and the remainder will be by the end of 2026.

Given the potential for enforcement action, it is essential that all controllers familiarise themselves with the changes as soon as possible.

This one-hour webinar analyses the key changes and emphasises what controllers need to do to ensure ongoing compliance

Keith will cover the following topics:

Key changes to the UK GDPR

Recognised legitimate interests
Privacy notices
Subject access requests
Automated decision making and profiling
International transfers

Key changes to the Privacy and Electronic Communications Regulations 2003

Cookies
Application of the soft opt-in to charities
Increased fining powers for breach

The webinar will also look at other topical developments including:

Subject access requests

Latest developments
Ashley v HMRC [2025] EWHC 134 (KB)

Oral disclosure of personal data

Does this constitute an act of processing?
Raine v JD Wetherspoon [2025] EWHC 1593 (KB)

Top 3 Facts from This Session

Gain an understanding of the changes introduced by the Data (Use and Access) Act 2025
Discover ways to adapt ensure ongoing compliance
Stay informed about other recent developments in this area of law

Who is this for?

Lawyers and non-lawyers with an interest in data protection

Level of expertise:

Intermediate - Some previous knowledge or awareness required

Learning outcomes:

To understand the changes made to the UK GDPR and other legislation
To consider what changes need to be made to existing practices to ensure ongoing compliance
To comprehend the latest thinking of the courts when interpreting the rules relating to subject access requests
To understand how the courts view the oral disclosure of personal data