{"page":"/blog/uk-data-use-and-access-act-advertising","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Provision","What it changes","In force","Source"],"rows":[["s. 70 and Sch. 4","Adds \"recognised legitimate interests\" to UK GDPR Article 6; new Article 6(11) lists \"direct marketing\" as an example that \"may be\" a legitimate interest","5 Feb 2026","s. 70; SI 2026/82, reg. 2(c)"],["s. 80","Changes the UK GDPR rules on decisions based solely on automated processing","5 Feb 2026","SI 2026/82, reg. 2(j)"],["s. 112 and Sch. 12","Substitutes PECR regulation 6, inserts regulation 6A and Schedule A1","5 Feb 2026","s. 112; SI 2026/82, reg. 2(w), (z13)"],["s. 115 and Sch. 13","Moves PECR enforcement onto the Data Protection Act 2018 penalty regime","5 Feb 2026","s. 115; SI 2026/82, reg. 2(y), (z14)"],["s. 103","Requires controllers to handle data protection complaints","19 Jun 2026","SI 2026/82, reg. 3"],["ss. 118 and 119","Abolishes the office of Information Commissioner and transfers its functions to the Information Commission","30 Sep 2026","SI 2026/1015, reg. 2"]],"sourceUrls":[["https://www.legislation.gov.uk/ukpga/2025/18/section/70","https://www.legislation.gov.uk/uksi/2026/82/made"],["https://www.legislation.gov.uk/uksi/2026/82/made"],["https://www.legislation.gov.uk/ukpga/2025/18/section/112","https://www.legislation.gov.uk/uksi/2026/82/made"],["https://www.legislation.gov.uk/ukpga/2025/18/section/115","https://www.legislation.gov.uk/uksi/2026/82/made"],["https://www.legislation.gov.uk/uksi/2026/82/made"],["https://www.legislation.gov.uk/uksi/2026/1015/made"]]}