Data (Use and Access) Act 2025
The Data (Use and Access) Act 2025 became law on 19 June 2025, following Royal Assent. This legislation introduces wide-ranging reforms to improve how data is accessed, shared, and protected across public and private services in the UK. It has particular relevance to the adult social care sector due to its emphasis on information standards, data protection, and improved data sharing between organisations.
While not all parts of the Act apply directly to adult social care, the Act includes several important provisions that will affect how providers manage digital care records, interact with NHS systems, and meet legal duties relating to data protection and cyber security.
See our briefing for adult social care providers
Data Protection Act 2018 and GDPR
The Data Protection Act 2018 and General Data Protection Regulation (GDPR) came into force in 2018.
All organisations must take steps demonstrate they are complying with the data protection legislation.
These laws apply to personal data which belongs to an identifiable, living person.
What’s changed
- You must keep records to prove that you are complying with the law.
- You must register with the Information Commissioner’s Office and pay a registration fee
Resources
- Information Commissioner’s Office guide to data protection
- Skills for Care guide to data protection job roles
- Our resources for demonstrating compliance
- Information Commissioner’s Office guide on Transparency in health and social care
