Data (Use and Access) Act
There still remain a number of provisions in the Data (Use and Access) Act 2025 which have not been commenced, and there has been a slight slippage of the Government's timetable for this. We should still expect some important provisions to be commenced very soon though, including flexible automated decision-making rules, new "recognised legitimate interests" grounds for processing, and simplified international transfers. The Act amends the UK GDPR and Data Protection Act 2018 (rather than being a standalone statute). The Information Commissioner (ICO) is understood to be developing updated guidance on these changes.
Direct Marketing Code of Practice
It is likely that the ICO will also be announcing work on the statutory Direct Marketing Code of Practice which has still not been published, despite it being required as far back as 2018.