DUAA Decoded: Innovation, automated decisions and data reform in the UK

Episode 1: The UK's Data (Use and Access) Act 2025 carries an ambitious promise: to unlock the secure and effective use of data, drive innovation, and reduce the compliance burden.   But does it deliver? And what do the changes mean in practice for businesses and organisations subject to the UK's GDPR, Data Protection Act and PECR?  Senior knowledge lawyer Emma Keeling and former ICO Deputy Commissioner Steve Wood open this three-part series by examining the DUAA through the lens of innovation, exploring what has changed for automated decision-making, the purpose limitation principle, and processing for research, archiving and statistical purposes. The question at the heart of this episode: do these changes genuinely open new doors, or do the details tell a more complicated story?  DUAA Decoded examines the practical implications of the UK's Data (Use and Access) Act 2025. Each episode unpacks what has changed and, crucially, what it means for organisations operating under the UK's data protection framework. These podcasts provide a clear, practical understanding of the DUAA's innovation-focused provisions, and what they mean for day-to-day data operations.