The Data (Use and Access) Act 2025 (DUAA) has brought the most significant changes to UK data protection since UK GDPR came into force. While it doesn't replace GDPR, the DPA 2018, or PECR, the DUAA reshapes how organisations process personal data, handle subject access, manage cookies, and apply legitimate interests.

In this episode, we share highlights from our live webinar, where VinciWorks experts explained how these reforms affect compliance strategies. From broad consent in scientific research and recognised legitimate interests, to expanded cookie exemptions, stricter rules for children's services, and higher PECR fines, the DUAA introduces both opportunities and risks.

Listen in to learn:

• What the DUAA changes — and what stays the same

• Updates to subject access rights and proportionality

• Cookie rules, soft opt-in for charities, and tougher PECR fines

• Automated decision-making and AI compliance under the DUAA

• The new "data protection test" for international transfers

• Practical steps to future-proof your compliance framework

This episode is essential listening for data protection officers, compliance professionals, and legal teams preparing for the future of UK data protection.