The UK Data Protection Reform – Herzog’s Guide to the Key Changes
19 June 2025
The United Kingdom’s parliament has approved the Data (Use and Access) Bill, which is now pending a Royal Assent, in order to become an act.
In recent years, data protection in the UK has been based on and aligned with the European Union’s Geneal Data Protection Regulation. Over the years, the UK Government has decided to depart from the EU-based regulatory regime. According to the presented reform, some elements of the current data protection legislation create barriers, uncertainty and unnecessary burdens for businesses and consumers. Therefore, the legislative reform is intended to update and streamline the requirements of the current legislation, and to reduce burdens on organization while maintaining high data protection standards.
Companies that are subject to UK data protection regime and have implemented the applicable requirements in their data processing activities should review their practices, procedures and policies, and adjust them to meet the updated requirements.
To assist with understanding the updated requirements under the Act, we are pleased to present this playbook, which provides a general overview of key changes presented by the new legislation and the practical steps that companies should take in order to comply with them. In addition, we highlight some additional changes made by the new legislation that do not require significant changes in the related procedures and processors, but provide further regulatory clarity on the respective subject matters.
For the full playbook >> click here
The Technology Regulation Department
Herzog Fox & Neeman
