IAPP UK Intensive 2026: Privacy | AI governance | Cybersecurity law
LONDON
23-26 February
Getting the Most Out of the Data Use and Access Act 2025
Thursday, 26 Feb.
14:15 - 15:15 GMT
Intermediate level
After two U.K. Governments, three draft bills and a lot of wrangling in the House of Lords, was the Data Use and Access Act 2025 worth it? This practical session will focus on various companies’ take up of the DUAA’s changes to the U.K.’s data protection regime. Eight months after royal ascent, the panelists will share the top-priority changes within their companies, and where the DUAA missed opportunities in global compliance programs. We will also review public perception of the changes and how to communicate them to data subjects. We will discuss the relaxations on reuse of personal data (including for AI), if any paperwork has been reduced, the impact on marketing and cookie compliance, updates to data processing terms and data subject rights.
What you will learn:
- How to benefit from the changes under the Data Use and Access Act 2025.
- Which changes to focus on in a global compliance program.
- Public perceptions and how to communicate the changes to data subjects.
Moderator and speakers

Eleanor Hobson
CIPP/E, CIPM
Partner
Kemp IT Law

Daisy Godfrey
CIPP/E
Head of Legal, Group, Digital and Data Protection
Aviva

Holly Jubb
Senior Cyber Security Manager
Gatwick Airport

Teodora Pimpireva Tapping
AIGP, CIPP/E
Global Head of Privacy
Bumble