{
  "legislation": {
    "id": "ukpga/2025/18",
    "title": "Data (Use and Access) Act 2025",
    "short_title": "Data (Use and Access) Act 2025",
    "citation": "2025 c. 18",
    "type": "ukpga",
    "date": "2025-06-19",
    "revised": true,
    "unapplied_effects": 34,
    "url": "https://openlegislation.uk/data-use-and-access-act-2025",
    "json_url": "https://openlegislation.uk/data-use-and-access-act-2025.json"
  },
  "direction": "made_by",
  "with": "eur/2013/611",
  "count": 4,
  "effects": [
    {
      "type": "substituted",
      "affected": {
        "id": "eur/2013/611",
        "title": "Commission Regulation (EU) No 611/2013 of 24 June 2013 on the measures applicable to the notification of personal data breaches under Directive 2002/58/EC of the European Parliament and of the Council on privacy and electronic communications",
        "provisions": "Art. 2(3)",
        "url": "https://openlegislation.uk/eu-regulation-2013-611"
      },
      "affecting": {
        "id": "ukpga/2025/18",
        "title": "Data (Use and Access) Act 2025",
        "provisions": "s. 111(3)(b)",
        "url": "https://openlegislation.uk/data-use-and-access-act-2025"
      },
      "applied": true,
      "requires_applied": true,
      "in_force_date": "2025-08-20"
    },
    {
      "type": "words inserted",
      "affected": {
        "id": "eur/2013/611",
        "title": "Commission Regulation (EU) No 611/2013 of 24 June 2013 on the measures applicable to the notification of personal data breaches under Directive 2002/58/EC of the European Parliament and of the Council on privacy and electronic communications",
        "provisions": "Art. 2(2)",
        "url": "https://openlegislation.uk/eu-regulation-2013-611"
      },
      "affecting": {
        "id": "ukpga/2025/18",
        "title": "Data (Use and Access) Act 2025",
        "provisions": "s. 111(3)(a)(iii)",
        "url": "https://openlegislation.uk/data-use-and-access-act-2025"
      },
      "applied": true,
      "requires_applied": true,
      "in_force_date": "2025-08-20"
    },
    {
      "type": "words substituted",
      "affected": {
        "id": "eur/2013/611",
        "title": "Commission Regulation (EU) No 611/2013 of 24 June 2013 on the measures applicable to the notification of personal data breaches under Directive 2002/58/EC of the European Parliament and of the Council on privacy and electronic communications",
        "provisions": "Art. 2(2)",
        "url": "https://openlegislation.uk/eu-regulation-2013-611"
      },
      "affecting": {
        "id": "ukpga/2025/18",
        "title": "Data (Use and Access) Act 2025",
        "provisions": "s. 111(3)(a)(i)",
        "url": "https://openlegislation.uk/data-use-and-access-act-2025"
      },
      "applied": true,
      "requires_applied": true,
      "in_force_date": "2025-08-20"
    },
    {
      "type": "words inserted",
      "affected": {
        "id": "eur/2013/611",
        "title": "Commission Regulation (EU) No 611/2013 of 24 June 2013 on the measures applicable to the notification of personal data breaches under Directive 2002/58/EC of the European Parliament and of the Council on privacy and electronic communications",
        "provisions": "Art. 2(2)",
        "url": "https://openlegislation.uk/eu-regulation-2013-611"
      },
      "affecting": {
        "id": "ukpga/2025/18",
        "title": "Data (Use and Access) Act 2025",
        "provisions": "s. 111(3)(a)(ii)",
        "url": "https://openlegislation.uk/data-use-and-access-act-2025"
      },
      "applied": true,
      "requires_applied": true,
      "in_force_date": "2025-08-20"
    }
  ],
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}