Description
This online course on the Data (Use and Access) Act 2025 (DUAA) provides an overview of what you need to know about the new DUAA UK law that received Royal Assent on 19 June 2025.
The law reforms data protection and privacy rules to foster innovation and economic growth. It updates UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). For further information on the DUAA, go to the ICO website.
Learning objectives
In this course you will learn:
- Understand the purpose and scope of the Data Use and Access Act
- Identify the roles and responsibilities of public authorities and trusted data users
- Recognise key DUAA principles, including public interest, data minimisation, and transparency
- Explain what recognised legitimate interests (RLIs) are and how they apply
- Know when and how secure processing environments must be used
- Understand how DUAA interacts with UK GDPR
Entry requirements
There are no entry requirements.
Course assessment and certification
On successful completion of the course a certificate is available for download.





