Study reveals UK businesses and staff are unprepared for DUA Act
03/11/2025 | Personnel Today
New research by VinciWorks reveals that most UK employers are unprepared for the phased implementation of the Data (Use and Access) Act 2025 (DUA Act), leaving companies exposed to compliance risks due to widespread uncertainty and a lack of skills development. A survey of 373 compliance professionals found that only 1.6% of organisations are fully ready for the new law, which amends parts of the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and Privacy and Electronic Communications Regulations 2003 (PEC-Regulations).
More than 77% of respondents admitted they are either unprepared, unsure, or only beginning preparations. With the DUA Act introducing updated rules on data access and governance, 47% of respondents cited updating data protection operations management, training, and vendor management as their biggest challenge. In comparison, 39% will prioritise staff training over the next six months.
The survey also highlighted that human error and mistakes remain the top data protection risk for 56% of respondents, underscoring the critical need for employee awareness and education. Employers in the legal and financial services sectors are least prepared, with fewer than 5% ready for compliance.
Training announcement: Discover the key amendments in the Data (Use and Access) Act 2025. Join us for a comprehensive one-day workshop and learn about the implications to UK data protection law. Aimed at practitioners, public schedule and onsite course options are available. Find out more.
What is this page?
You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.
The Privacy Newsfeed monitors over 300 global publications, of which more than 6,250 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.