DUAA Decoded: Reducing the compliance burden under UK Data Law

Episode 2: One of the UK Government's central promises for the Data (Use and Access) Act was simpler compliance. But does the reality match the rhetoric?  

For legal, data protection and compliance teams navigating GDPR, the Data Protection Act and PECR, the question is a practical one: do these changes meaningfully reduce the day-to-day burden, or do they simply shift it? 

Senior knowledge lawyer Emma Keeling and former ICO Deputy Commissioner Steve Wood examine the DUAA's compliance-easing provisions in detail, looking at changes to lawful basis, data subject rights, the complaints process and international transfers. They assess where the Act genuinely delivers relief and where organisations still face complexity. 

DUAA Decoded examines the practical implications of the UK's Data (Use and Access) Act 2025. Each episode unpacks what has changed and, crucially, what it means for organisations operating under the UK's data protection framework. These podcasts provide a clear, practical understanding of the DUAA's innovation-focused provisions, and what they mean for day-to-day data operations.