New Data Regulations: What You Need to Know

In a notable update to the UK's data laws, the Data (Use and Access) Act 2025 has seen the enforcement of its second set of regulations. These changes, effective from 30th September 2025, are designed to enhance the retention of information by internet service providers in cases involving the death of a child.

Key Points:

• Regulation Activation: The new regulations bring Section 124 of the Data (Use and Access) Act 2025 into full effect. This section specifically deals with how data should be handled by internet service providers and social media platforms during investigations into the unfortunate event of a child's death.

• Integration with the Online Safety Act: The regulation amends the Online Safety Act 2023, expanding its scope to ensure that providers of regulated services—like social media companies—must retain relevant data. This data retention is crucial for investigations and is limited to services defined under existing legislation.

• Why This Matters: By mandating data retention, the regulation aims to support authorities in conducting thorough investigations. This change underscores a commitment to online safety, particularly concerning vulnerable groups such as children.

• No New Impact Assessment: While this regulation is significant, a new impact assessment has not been prepared since a comprehensive analysis was completed during the drafting of the Data (Use and Access) Bill. For those interested, the full impact assessment can be accessed on the UK Government's website.

These updates mark an important step in the ongoing effort to adapt data laws to the complexities of the digital age, ensuring that the protection of individuals, particularly children, remains a priority as technology continues to evolve.