Articles Posted in Data (Use and Access) Act 2025 (DUAA)

Posted

As of June 19, 2026, the Data (Use and Access) Act 2025 (DUAA) has brought into force new complaints-handling requirements for controllers under the UK data protection regime. (See our previous post on the DUAA here.) While many businesses already operate customer complaint or data subject rights processes, the DUAA now places specific statutory obligations on controllers to receive, acknowledge, investigate and respond to data protection complaints received on or after June 19, 2026.

Continue reading