Jurisdiction · 8 regulations

United Kingdom: data, AI and cyber laws

8 regulations in United Kingdom that affect companies handling data: Data (Use and Access) Act, UK Cyber Security and Resilience Bill, UK Data Protection Act 2018, UK GDPR, UK Investigatory Powers (Amendment) Act 2024, UK Online Safety Act, UK PSTI Act (product security), UK Telecommunications Security Act. Part of UK and Europe.

8 regulations

Add to calendar

Apple Calendar or Outlook Google Calendar Download .ics

Sort

	Status
Data (Use and Access) Act Data (Use and Access) Act 2025	In force	Aug 20, 20251 year ago	Sep 30, 2026in 4 days ICO abolished; Information Commission takes over
UK Cyber Security and Resilience Bill Cyber Security and Resilience (Network and Information Systems) Bill	Proposed	Not set	Oct 26, 2026in 4 weeks Lords report stage scheduled
UK Data Protection Act 2018 Data Protection Act 2018	Amended	May 25, 20188 years ago	None upcoming
UK GDPR UK General Data Protection Regulation and Data Protection Act 2018	Amended	May 25, 20188 years ago	None upcoming
UK Investigatory Powers (Amendment) Act 2024 Investigatory Powers (Amendment) Act 2024	Enacted	Not set	None upcoming
UK Online Safety Act Online Safety Act 2023	In force	Mar 17, 20251 year ago	None upcoming
UK PSTI Act (product security) Product Security and Telecommunications Infrastructure Act 2022 and the Product Security Regulations 2023	In force	Apr 29, 20242 years ago	None upcoming
UK Telecommunications Security Act Telecommunications (Security) Act 2021 and the Electronic Communications (Security Measures) Regulations 2022	In force	Oct 1, 20223 years ago	None upcoming

Upcoming deadlines

Date	Regulation	What happens	When
Sep 30in 4 days	UK DUAAData (Use and Access) ActUnited Kingdom ICO abolished; Information Commission takes over	ICO abolished; Information Commission takes over	in 4d
Oct 26in 4 weeks	UK CSR BillUK Cyber Security and Resilience BillUnited Kingdom Lords report stage scheduledtentative	Lords report stage scheduledtentative	in 30d

Past deadlines

Date	Regulation	What happens	When
Jun 1920263 months ago	UK DUAAData (Use and Access) ActUnited Kingdom Mandatory data protection complaints procedure	Mandatory data protection complaints procedure	3mo ago
Jun 1620263 months ago	UK CSR BillUK Cyber Security and Resilience BillUnited Kingdom Passes House of Commons	Passes House of Commons	3mo ago
Apr 1120265 months ago	UK OSAUK Online Safety ActUnited Kingdom Fee notification window closes (2026/27)	Fee notification window closes (2026/27)	6mo ago
Feb 520267 months ago	UK GDPRUK GDPRUnited Kingdom DUAA amendments to UK GDPR commence	DUAA amendments to UK GDPR commence	8mo ago
Feb 520267 months ago	UK DUAAData (Use and Access) ActUnited Kingdom Stage 3: main data protection changes commence	Stage 3: main data protection changes commence	8mo ago
Nov 12202510 months ago	UK CSR BillUK Cyber Security and Resilience BillUnited Kingdom Introduced (Commons first reading)	Introduced (Commons first reading)	10mo ago
Aug 2020251 year ago	UK DUAAData (Use and Access) ActUnited Kingdom Stage 1 commencement	Stage 1 commencement	13mo ago
Jul 2520251 year ago	UK OSAUK Online Safety ActUnited Kingdom Protection of children duties apply	Protection of children duties apply	14mo ago
Jun 1920251 year ago	UK DUAAData (Use and Access) ActUnited Kingdom Royal Assent	Royal Assent	15mo ago
Apr 1620251 year ago	UK OSAUK Online Safety ActUnited Kingdom Children's access assessments due	Children's access assessments due	17mo ago
Mar 1720251 year ago	UK OSAUK Online Safety ActUnited Kingdom Illegal harms duties enforceable	Illegal harms duties enforceable	18mo ago
Apr 2920242 years ago	UK PSTI Act (product security)UK PSTI Act (product security)United Kingdom Product security requirements apply	Product security requirements apply	2.4y ago
Apr 2520242 years ago	UK Investigatory Powers (Amendment) Act 2024UK Investigatory Powers (Amendment) Act 2024United Kingdom Royal Assent	Royal Assent	2.4y ago
Oct 2620232 years ago	UK OSAUK Online Safety ActUnited Kingdom Royal Assent	Royal Assent	2.9y ago
Dec 620223 years ago	UK PSTI Act (product security)UK PSTI Act (product security)United Kingdom Royal Assent	Royal Assent	3.8y ago
Oct 120223 years ago	UK Telecommunications Security ActUK Telecommunications Security ActUnited Kingdom Security measures regulations in force	Security measures regulations in force	4y ago
Nov 1720214 years ago	UK Telecommunications Security ActUK Telecommunications Security ActUnited Kingdom Royal Assent	Royal Assent	4.9y ago
Jan 120215 years ago	UK GDPRUK GDPRUnited Kingdom UK GDPR takes effect after Brexit transition	UK GDPR takes effect after Brexit transition	5.7y ago
Jul 2320188 years ago	UK Data Protection Act 2018UK Data Protection Act 2018United Kingdom Age appropriate design code powers commence	Age appropriate design code powers commence	8.2y ago
May 2520188 years ago	UK GDPRUK GDPRUnited Kingdom Data Protection Act 2018 and GDPR apply	Data Protection Act 2018 and GDPR apply	8.3y ago
May 2520188 years ago	UK Data Protection Act 2018UK Data Protection Act 2018United Kingdom Main provisions commence	Main provisions commence	8.3y ago
May 2320188 years ago	UK Data Protection Act 2018UK Data Protection Act 2018United Kingdom Royal Assent	Royal Assent	8.3y ago

United Kingdom: data, AI and cyber laws

8 regulations

Upcoming deadlines

Past deadlines

Rule changes by email