ARTICLE
11 August 2025

Does The Data (Use And Access) Act Deliver Innovation And Opportunity? (Podcast)

AO
A&O Shearman

Contributor

A&O Shearman was formed in 2024 via the merger of two historic firms, Allen & Overy and Shearman & Sterling. With nearly 4,000 lawyers globally, we are equally fluent in English law, U.S. law and the laws of the world’s most dynamic markets. This combination creates a new kind of law firm, one built to achieve unparalleled outcomes for our clients on their most complex, multijurisdictional matters – everywhere in the world. A firm that advises at the forefront of the forces changing the current of global business and that is unrivalled in its global strength. Our clients benefit from the collective experience of teams who work with many of the world’s most influential companies and institutions, and have a history of precedent-setting innovations. Together our lawyers advise more than a third of NYSE-listed businesses, a fifth of the NASDAQ and a notable proportion of the London Stock Exchange, the Euronext, Euronext Paris and the Tokyo and Hong Kong Stock Exchanges.
In this short series of podcasts, senior knowledge lawyer, Emma Keeling, and A&O Shearman's data consultant and former ICO Deputy Commissioner, Steve Wood, take a look at some of the key data protection and e-privacy aspects of the UK's Data (Use and Access) Act 2025 (the DUAA).
United Kingdom Privacy

In this short series of podcasts, senior knowledge lawyer, Emma Keeling, and A&O Shearman's data consultant and former ICO Deputy Commissioner, Steve Wood, take a look at some of the key data protection and e-privacy aspects of the UK's Data (Use and Access) Act 2025 (the DUAA).

In focusing on the data protection and e-privacy developments, they consider what has changed, but most importantly what that means in practice for businesses and organisations subject to the UK's GPDR, Data Protection Act and Privacy and Electronic Communications Regulations (PECR).

They consider if and how the DUAA can support innovation and technological developments, how the DUAA may relieve organisations of their day to day compliance burden, what is new for the ICO, and the implications of changes to PECR.

One of the UK Government's primary stated aims of the DUAA is to unlock the secure and effective use of data, encouraging innovation. The ICO in its summary documentation flags a number of amendments as being supportive of that agenda.

In the first podcast, Emma and Steve will be looking today at changes to the requirements for:

  • automated decision making
  • the purpose limitation principle
  • updates regarding research, archiving and statistical purposes of processing.

Since recording, regulations have been made to bring into force further DUAA provisions, as from August 20, 2025. In relation to the content relevant for this podcast, these include provisions regarding, amongst others, special categories of personal data (s. 74 DUAA), Secretary of State regulations (s. 107 DUAA) and general minor amendments (s. 108 DUAA).

These podcasts assume some knowledge of data protection and you can read more on the background of the DUAA in our blogs below:

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More