With effect from 5 February 2026, most of the DATA ( USE and ACCESS ) ACT 2025, has become applicable, including in relation to (i) automated decision-making and AI, (ii) protection of children’s data, (iii) calculation of timeframes for and complaints about Data Subject Access Requests, (iv) new duties and powers for the ICO, and (v) a new “recognized legitimate interests” lawful basis for certain processing related to such matters as serious civil emergencies, detecting investigating or preventing crime, and safeguarding vulnerable individuals.