Global Data Privacy & PETs Developments (June–July 2025)
The Data (Use and Access) Act 2025 received Royal Assent on 19 June 2025 and updates UK GDPR with predefined “recognised legitimate interests”, higher PECR fines up to £17.5M or 4% of global turnover, and new Smart Data portability and digital identity frameworks. The European Commission extended the UK’s EU adequacy decision by six months to 27 December 2025 to reassess data protection adequacy. EU policy in May 2025 proposed GDPR simplification for SMEs, exempting organizations with fewer than 750 employees from processing records unless high-risk processing occurs. India’s Digital Personal Data Protection Act (DPDPA) entered into force in July
