GDPR Training in 2026: Is your firm equipped for the Data (Use and Access) Act?
Summary
The article says UK data protection law has been updated by the Data (Use and Access) Act 2025, with all provisions now in force from June 2026, including a mandatory complaints-handling procedure. It argues that firms should review GDPR training, policies and staff understanding to ensure day-to-day practice reflects the current legal position and not outdated guidance.
Why it matters
Residential property surveyors and firms handling client data, marketing and subject access requests need to ensure their data protection training and procedures are current. Weaknesses in staff awareness or breach response can create compliance risk, particularly where personal and special category data is processed.
Key points
- Data (Use and Access) Act 2025 provisions are now in force, including a formal complaints-handling requirement.
- Firms are being urged to check whether GDPR training reflects current law and practice.
- The article highlights risks around special category data, breach reporting and subject access requests.
- It cites an ICO fine against DPP Law as an example of the consequences of poor data protection controls.
- Training is presented as part of a wider compliance approach including audits, policy reviews and gap analysis.
This is an RPSA summary of a publicly available article. The full content remains with the original publisher.
