Data (Use and Access) Act 2025

Clause 90, page 113, line 15, at end insert “in accordance only with the Commissioner’s duties under section 108 of the Deregulation Act 2015 (exercise of regulatory functions: economic growth).”

Clause 1, page 3, line 11, at end insert—

“(5A) In subsection (2), references to information includes inferred data.”

Clause 2, page 4, line 1, after “to” insert “the customer's data rights or”

Clause 90, page 113, leave out lines 20 to 22 and insert—

“(e) the fact that children are entitled to a higher standard of protection than adults with regard to their personal data;

Clause 3, page 4, line 24, at end insert—

“(2A) The regulations must include data communities in the list of specified people.”

Clause 90, page 113, line 20, after “children” insert “merit specific protection with regard to their personal data because they”

Clause 3, page 6, line 7, at end insert—

“(12) In this Act, a “data community” means an entity established to activate data subjects’ data rights under Chapters III and VIII of the UK GDPR on their behalf.”

After Clause 92, insert the following new Clause—

“Code of practice on children and AI

After Clause 92, insert the following new Clause—

“Code of practice on data communities

Leave out Clause 13

After Clause 92, insert the following new Clause—

“Register and oversight of data communities

Clause 28, page 30, line 28, at end insert—

“(2A) In preparing the DVS trust framework the Secretary of State must assess whether the public authorities listed in subsection (2B) reliably ascertain the personal data attributes that they collect, record and share.

Clause 28, page 31, line 22, at end insert—

“(11) The Secretary of State must lay the DVS trust framework before Parliament.”

After Clause 92, insert the following new Clause—

“Code of practice on Children's Data and Education

Clause 45, page 42, line 23, at end insert—

“(5A) A public authority must not disclose information about an individual under this section unless the information—

Clause 94, page 119, line 1, at end insert—

“(1) In the 2018 Act, in section 139, after subsection (2) insert—

Clause 101, page 129, line 38, at end insert—

“(5A) The report must—

After Clause 50, insert the following new Clause—

“Digital identity documents and digital identity theft review

Clause 56, page 52, line 13, leave out “undertaker’s” and insert “contractor’s”

After Clause 104, insert the following new Clause—

“Review of court jurisdiction