Which legal framework will my organisation be processing under?
-
The Data (Use and Access) Act 2026 got Royal Assent on 19 June 2025. All the provisions affecting data protection law and the Privacy and Electronic Regulations Communications are now in force. The Department for Science and Innovation (DSIT) has set out the commencement plans. You can find more details on the Gov.uk website.
We have produced two separate toolkits depending on which legal framework your organisation will be processing under. This will depend on your type of organisation and why you will be processing personal data.
You can find more information about the different legislation in our Canllaw i Ddiogelu Data .
For information on processing under part 3 of the Data Protection Act 2018, see our Guide to Law Enforcement Processing.
The following questions will help you understand which legislation you will be processing under.