The House of Lords passed the Data (Use and Access) Bill on 11 June. Receiving Royal Assent means it is now on the statute books. A long ping-pong between the two Houses about AI training and copyright delayed the last stages of the Bill which had broad cross-party support. The new law does not alter the UK’s current data protection regime as dramatically as was ­proposed under the Conservative government.

Commenting on the relationship between the UK GDPR, the Data Protection Act and DUA Act, Eduardo Ustaran, Partner at Hogan Lovells said: “The DUA Act is the tool that the UK Government has used to reform the existing UK data protection legal framework established jointly by the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations. The term “reform” is probably a bit of an overkill, as in reality the changes introduced by the DUA Act are quite modest in terms of their effect on the overall data protection framework.”