Data (Use and Access) Act 2025

The Data Act 2025 is an act of the Parliament of the United Kingdom concerned with data protection. The act makes changes primarily to the operation of the UK's General Data Protection Regulation and the Data Protection Act 2018. The act passed into law on 19 June 2025.
The provisions of the act are being implemented "slowly", in stages: the initial implementation of certain aspects of the new law took effect on 19 and 20 August 2025.
The act also includes a variety of other measures. This includes legislating against the creation, or the request for creation, of intimate images of another person who has not consented to this, for example by using Generative AI. On 12 January 2026, technology minister Liz Kendall announced this would be enabled that week, in response to the Grok (chatbot)#Sexual deepfake [generation on X|Grok AI image generation scandal].
The Information Commissioner's Office is responsible for publishing regulatory guidance on the act.