1 of 6: What Is the Data Use and Access Act 2025 (DUAA)?
The Data Use and Access Act 2025 (DUAA) is a landmark UK law that regulates access, sharing, and processing of data across sectors. Learn what DUAA is and how it complements GDPR.
-
-
Key Definitions and Scope of the Data Use and Access Act 2025 (DUAA)
Understanding the DUAA starts with the basics. Learn the key definitions—like data user, data provider, access agreement—and the scope of the Data Use and Access Act 2025.
-
What Is a DUAA Access Arrangement and When Do You Need One?
An Access Arrangement under the DUAA is a legal requirement for many data-sharing activities. Find out when your company needs one and what it must include.
-
When Can You Use Automated Decision-Making? Legal Bases and Safeguards Explained
UK GDPR Article 22 restricts automated decisions — but there are exceptions. Learn when you can use automation lawfully and what safeguards you must have in place.
-
Obligations for Data Providers and Data Users under the DUAA
The DUAA introduces specific duties for data providers and data users. Learn what your obligations are and how to structure compliant access arrangements and audits.
-
High-Risk Data Uses Under the DUAA — What Triggers Extra Oversight?
Not all data use is equal under the DUAA. Learn how high-risk uses—like AI, profiling, and sensitive data handling—trigger stricter obligations and oversight.
-
Audits, Enforcement, and Penalties Under the DUAA — What Companies Need to Know
Non-compliance with the DUAA can lead to fines, audits, and reputational damage. Learn how enforcement works, what to expect in an audit, and how to avoid penalties.
-
Understanding the Right to Object Under UK GDPR (Article 21)
The UK GDPR grants individuals the right to object to certain types of data processing. Learn what Article 21 means for your company and how to stay compliant.
-
How to Handle Objections to Direct Marketing Under UK GDPR
Under Article 21 of UK GDPR, individuals can object to direct marketing at any time. Learn how your company must respond — and what compliance looks like in practice.
-
What Article 22 Says About Automated Decisions — and Why It Matters
Article 22 of the UK GDPR restricts fully automated decisions that impact individuals. Understand what this means for AI, recruitment tools, and data-driven profiling.
