Data protection and journalism: how to complain about media organisations
-
The Data (Use and Access) Act 2026 got Royal Assent on 19 June 2025. All the provisions affecting data protection law and the Privacy and Electronic Regulations Communications are now in force. The Department for Science and Innovation (DSIT) has set out the commencement plans. You can find more details on the Gov.uk website.
Introduction
Freedom of expression – including a free and independent press – are important in a healthy democracy. Media organisations must therefore be able to process personal data when producing journalistic content, where there is a public interest in doing so. Data protection law recognises this by including specific rules that help balance the right to privacy with the right to freedom of expression. However, media organisations must still comply with data protection law.
When producing journalistic content, most media organisations are also subject to industry rules and codes of practice that govern the standards they must apply. Several organisations regulate these rules and codes.