The Data Use and Access Act 2025 is the UK’s first major post Brexit reform of data protection law. It reshapes how organisations can use personal data while keeping the UK aligned with European standards. For businesses, it promises fewer friction points, clearer permissions, and new flexibility in how data supports commercial decision making.
This is not a wholesale rewrite of the GDPR framework. Instead, it subtly adjusts how companies justify data use, respond to complaints, and deploy technology driven decision making. Where does this leave businesses using AI? How far can restrictions really be loosened without increasing risk? And why is EU adequacy still behind every change?

The Commercial Awareness Compass by AllAboutLaw, helps you build your commercial awareness every week with a beginners, intermediate and advanced breakdown of a story from an expert lawyer and trainee solicitor host. 

This story was taken from a live conversation a few months ago. If you don't want to wait for these conversations, head over to the Commercial Awareness Compass to get them straight to your inbox each week. 

🚀 Boost your commercial awareness: https://www.allaboutlaw.co.uk/commercial-awareness-compass