Skip to content
Welcome, thoughtbot's Giant Robots listeners!Start here
Data (Use and Access) Act 2025
AI-generated illustration
Legislation

Data (Use and Access) Act 2025

UK data law passed in June 2025 after a Lords fight over AI copyright.

Peers pressing AI duties into the Cyber Resilience Bill before 26 October 2026 face the Data (Use and Access) Act 2025 as a warning: its AI copyright clauses were stripped out before it passed in June 2025.

Last refreshed: 12 October 2026

Key Question

Why did peers lose the fight over AI and copyright?

Timeline for Data (Use and Access) Act 2025

#14 7 Oct

Named as Data (Use and Access) Bill

Cybersecurity: Threats and Defences: Mentioned in: Peers table AI amendments to cyber bill
View full timeline →

Background

The Data (Use and Access) Act 2025, chapter 18 of that year, was enacted on 19 June 2025. It covers access to customer and business data, digital verification services and data protection, and it creates a new Information Commission.

The Act's passage through Parliament turned into a contest over AI. Peers led by Baroness Kidron kept writing in a duty on AI developers to reveal their use of copyright works, and the Commons struck it out every time. After five rounds of ping-pong the Lords conceded in June 2025.

In place of that disclosure duty, sections 135 and 136 oblige ministers to publish an economic impact assessment and a report on copyright and AI within nine months.

Common Questions
When did the Data (Use and Access) Act become law?
It was enacted on 19 June 2025 as chapter 18 of 2025.Source: legislation.gov.uk
Does the Data (Use and Access) Act require AI firms to disclose training data?
No. The Lords amendments were dropped; the Act instead requires a government report on copyright and AI.Source: legislation.gov.uk; Wiggin
What does the Data (Use and Access) Act 2025 cover?
Customer and business data access, digital verification, data protection and privacy, and the Information Commission.Source: legislation.gov.uk
Source Material