signzy

API Marketplace

downArrow
Logo
Responsive
Decorative line

UK Data Use and Access Act

United Kingdom

United Kingdom

2025

Privacy

Overview

The UK Data Use and Access Act is a proposed framework designed to improve data sharing and access across sectors while upholding strong privacy protections. It builds on the UK's National Data Strategy and aims to promote responsible data-driven innovation by clarifying the legal basis for data access and reuse, particularly for public interest and research purposes.
The Act introduces measures to reduce friction in data-sharing between organizations, ensure equitable access to data, and establish governance structures for secure data sharing. It proposes the use of Smart Data schemes and mandates sector-specific regulations to facilitate safe, interoperable, and privacy-preserving access. Although not yet enacted, it reflects the UK government's strategic shift toward a pro-growth, innovation-friendly data economy, while maintaining transparency and accountability.
This proposed regulation is highly relevant to financial institutions, healthcare organizations, research bodies, technology companies, data intermediaries, and public sector agencies involved in data sharing and analytics across the UK.

Key Obligations

  • Establish clear data access frameworks to enable responsible reuse
  • Introduce Smart Data schemes to support consumer data portability
  • Encourage public-private partnerships for data sharing in key sectors
  • Require sector regulators to define interoperable and secure data exchange protocols
  • Support open data initiatives while ensuring data protection compliance
  • Establish oversight mechanisms and codes of conduct for data intermediaries

FAQ

Is the UK Data Use and Access Act currently in force?

No, the Act is still under proposal and public consultation phases. It has not yet been enacted into law as of 2025.

What is a Smart Data scheme under this regulation?

Smart Data schemes are frameworks that allow consumers to safely share their data with third-party services, enabling more personalized and competitive offerings.

Who would be subject to the Act once it is passed?

Entities across sectors such as finance, health, telecom, energy, and government that handle or share data in the UK would be impacted.

How does this Act relate to the UK GDPR?

The Act complements UK GDPR by focusing on data access and sharing governance, whereas UK GDPR centers on personal data protection and rights.