IAPP UK Intensive 2026: Privacy | AI governance | Cybersecurity law

LONDON

23-26 February

Back to conference agenda

Getting the Most Out of the Data Use and Access Act 2025

Thursday, 26 Feb.

14:15 - 15:15 GMT

Intermediate level

BREAKOUT SESSIONPRIVACYDATA SECURITYLAW AND REGULATIONPERSONAL IMPACTSCUSTOMER TRUST AND EXPECTATIONS

After two U.K. Governments, three draft bills and a lot of wrangling in the House of Lords, was the Data Use and Access Act 2025 worth it? This practical session will focus on various companies’ take up of the DUAA’s changes to the U.K.’s data protection regime. Eight months after royal ascent, the panelists will share the top-priority changes within their companies, and where the DUAA missed opportunities in global compliance programs. We will also review public perception of the changes and how to communicate them to data subjects. We will discuss the relaxations on reuse of personal data (including for AI), if any paperwork has been reduced, the impact on marketing and cookie compliance, updates to data processing terms and data subject rights.

What you will learn: 

  • How to benefit from the changes under the Data Use and Access Act 2025. 
  • Which changes to focus on in a global compliance program. 
  • Public perceptions and how to communicate the changes to data subjects.

Moderator and speakers

generic profile silhouette

Eleanor Hobson

CIPP/E, CIPM

Partner

Kemp IT Law

headshot of Daisy Godfrey

Daisy Godfrey

CIPP/E

Head of Legal, Group, Digital and Data Protection

Aviva

generic profile silhouette

Holly Jubb

Senior Cyber Security Manager

Gatwick Airport

generic profile silhouette

Teodora Pimpireva Tapping

AIGP, CIPP/E

Global Head of Privacy

Bumble