Changes to legislation
-
The Data (Use and Access) Act 2025 got Royal Assent on 19 June 2025. All the provisions affecting data protection law and the Privacy and Electronic Regulations Communications are now in force. The Department for Science and Innovation (DSIT) has set out the commencement plans. You can find more details on the Gov.uk website.
New legislation and legislation going through the UK Parliament may have an impact on aspects of this guidance. These include the Data (Use and Access) Act 2025 (DUAA) and the Children’s Wellbeing and Schools Bill. It will remain the case that data protection is not a barrier to information sharing.
We’re reviewing existing guidance that is affected by DUAA, as well as creating new guidance. The DfE has stated it will produce new guidance to support the implementation of the Children’s Wellbeing and Schools Bill, once it has received Royal Assent.
We’ll update this and other data sharing guidance as appropriate. Please see our guidance on The Data Use and Access Act 2025 (DUAA) - what does it mean for organisations? for more information.
The Crime and Policing Bill contains a draft provision placing a duty on adults working in certain roles in England to notify the police or local authority where they have reason to suspect child sexual abuse may have taken place. This duty is not expected to be in force straight after Royal Assent. The Home Office has stated it will produce guidance on the duty.