Understanding The Data (Use and Access) Act

Helping business access the benefits of the DUAA – Training

3-hour DUAA training course is for data protection leads and senior managers looking at access the benefits of the data (use and access) act

It helps attendees understand:

  • The benefits on offer from the DUAA.
  • If they need to make changes to organisational procedures to capitalise on the Act. 

The Data (Use and Access) Act 2025 reforms how the UK manages personal and non-personal data.  It changes existing data laws in order to promote innovation and economic growth.  In simple terms it offers opportunities to reduce data protection and make things easier for organisations and business. 

It is a wide-ranging Act that introduces several amendments to the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and the Privacy & Electronic Communications Regulations (PECR).

Key changes include: –

  • Limitations to Subject Access Requests (SARs)
  • Introduction of recognised legitimate interests
  • Modifications to rules relating to automated decision-making (ADM).

Other UK GDPR amendments include revisions to international data transfers, purpose limitation, scientific research and enhanced protections concerning children’s data.

The new law also relaxes rules governing the use of cookies and aligns fines for non-compliance with PECR with those of the UK GDPR.

In terms of criminal law enforcement processing, the Act clarifies the definition of consent, aligns response times for data subject rights with those of the UK GDPR and introduces additional requirements to codes of conduct for competent authorities.

Finally, the Information Commissioner’s Office (ICO) will undergo significant organisational changes and will now be known as the Information Commission

For Whom ?

This short course is designed for data protection leads and senior managers who need to understand the benefits on offer and understand, better, if they need to make changes to organisational procedures to capitalise on the Act.   The course also helps data processors at all levels understand the very latest requirements.   Participants need working knowledge of previous legislative definitions, terms and scope.   

DUAA Training Course Content

The course commences with a short reminder of the existing legislation and then explores, step by step, what is actually changing under, The Data (Use and Access) Act 2025 (DUAA).  The course is accompanied with case studies and checklists for policy and procedural content.

  1. Short Introduction:

  • A brief summary of the rationale and basis for UK Data Protection Reform
  • Refresher on key legal and technical terms encountered in previous training.
  • Expected times before most DUAA provisions can take effect. 

  1. Changes to the PECR:

  • Low-risk cookies and similar tracking technologies 
  • Personal data breach reporting
  • Charities’ fundraising activities and the soft-opt in
  • Codes of Conduct

  1. Changes to the UK GDPR & Data Protection Act 2018

  • Subject Access Requests (SARs)
  • Data subject rights’ response times
  • Definition of consent
  • Recognised legitimate interests.
  • Automated Decision Making
  • International data transfers
  • Children’s data
  • Purpose limitation
  • Research, archive, and statistical (RAS) purposes.
  • Codes of conduct for competent authorities

  1. Changes to the Information Commissioner’s Office (ICO):

  • Information Commission (IC) -New board structure
  • Enhanced investigatory powers to:
    • Compel witnesses to attend interviews.
    • Require organisations to produce technical reports.
  • Power to issue increased fines and penalties for PECR breaches
    • £17.5M or 4& global turnover
    • More fines and penalties, by quantity, are issued for PECR breaches that GDPR breaches

MORE - Data Protection Courses

Image of book with GDPR on cover - data protection training courses from Concrew Training
GDPR & Data Protection Training
Data Protection - Training Courses
Data (Use and Access) Act Training Course
UK GDPR - Data Protection Training Course
PECR Training Course
Preventing Data Protection Breaches Training
Data Protection Impact Assessment Training
Information Governance

Data Protection, GDPR, PECR and DUAA Reference Guides

Data protection is the process of safeguarding important information from corruption, compromise, or loss, while ensuring personal data is handled lawfully, transparently, and securely.  The legislation is complex and the protentional fines for breaches huge.  our Data Protection, GDPR and PECR training courses bring you up to date with the latest developments and help you make sure you are 100% compliant. Our reference documents provide outline guidance. 

Data Protection Complaints Policy Template & Guidance

All organisations are required to publish their policy and procedure for make a complaint about the organisations data protection.  This free to use reference document and template is free to download and use 

GDPR Necessary, Fair and Transparent Explained

Before an organisation or business processed any personal data it has to ensure there is a legal basis for processing. It has to be necessary, fair and transparent.  Many organisations fail to meet these requirements are put themselves at risk.  Find out more about good process in this reference document

How frequent should GDPR Data Protection Training be?

This a frequently asked question and one we attempt to answer. The one over-arching answer is to risk assess, many find this too vague so we try to be more helpful in this guide

The ICO guide to the PECR – PDF

The ICO is responsible for overseeing adherence to the PECR.  This PDF document summarises all, alternatively see the ICO website 

FAQ - Frequently Asked Questions about this Training

If you can’t find the answer you’re looking for, feel free to contact our support team.

Why should you use Concrew Training?

  • Specialist HR, Employment Law & Compliance training provider
  • We reference to official Government bodies such as ACAS, ICO, EHRC
  • Content tailored to your policies and procedures
  • CPD certificates included
  • 12 months of post-course support
  • UK-wide delivery
  • Online and face-to-face options
  • Open and transparent pricing

What information is available on course content?

We publish detailed course overviews for all courses. These provide indicative content based on the course learning plans. Final content is tailored to each client’s individual requirements.

What other information is available on individual courses?

Free reference guides and resources to help employers evaluate training quality and improve workplace compliance

Can you include our company policies and procedures in the training?

Yes. We actively encourage this approach. Including your policies and procedures helps demonstrate how, where, and why good practice applies within your organisation. This contextualises the learning, improves engagement, and increases the practical value of the training. There is no additional charge for incorporating your policies and procedures.

How long do Concrew Training courses last?

  • Standard courses: 6 hours of learning (approx. 7 hours including breaks)
  • Condensed 3-hour sessions available
  • Extended sessions or multi-day programmes available

How many people can attend each course?

  • Online courses: up to 15 participants
  • Face-to-face courses: up to 20 participants
  • Whole workforce awareness sessions: available for larger groups

Where does Concrew Training deliver training?

  • Online: via your preferred video conferencing platform (Zoom, Teams, etc.) across the UK
  • Face-to-face: on your premises in England, Scotland, and Wales

How much does your training cost?

Typical prices range from £800 to £2,000 excluding VAT. Final cost depends on course duration, location, number of participants, and payment terms.

  • Full pricing details available on our website
  • No hidden charges
  • Formal quotations remain valid for 30 days

What are your courses like?

Our courses are delivered as interactive workshops rather than traditional lectures, and typically include:

  • Subject specialist input
  • Interactive quizzes
  • Group discussions
  • Practical exercises
  • Real-world case studies

We incorporate your organisation’s policies and procedures wherever possible to ensure the learning is relevant, engaging, and immediately applicable.

Who delivers the training?

Training is delivered by experienced subject specialists with extensive knowledge in their field. Our trainers:

  • Have significant practical experience
  • Can answer most participant questions during the session
  • Provide follow-up responses for complex questions
  • Are skilled facilitators who make technical subjects engaging

Do you issue CPD certificates?

Yes. All participants receive a CPD certificate detailing learning hours completed and headline course content.

Who uses your training services?

We work with organisations of all sizes, including:

  • Large international organisations
  • Public sector employers
  • Charities and not-for-profits
  • SMEs and local businesses

Attendees commonly include directors, senior leaders, HR professionals, operational managers, line managers, employee representatives, and staff teams. Customer feedback and testimonials are available on our website.

Why should I book a Concrew Training course?

Our training is:

  • Delivered live by subject specialists
  • Designed for real-world application
  • Suitable for teams of up to 20 participants
  • Available face-to-face in England, Scotland, and Wales
  • Available online across the UK
  • Practical, engaging, and immediately applicable
  • High-quality and competitively priced

Suitable for directors, senior leaders, HR teams, operational managers, line managers, staff teams, and employee representatives.

How far in advance should we book training?

We recommend booking training 2–3 months in advance. Availability is generally good with a three-month lead time. Dates are only reserved once a booking is confirmed. Short-term bookings may be limited.

How do I book a course?

  1. Complete our quote request form
  2. Receive a formal quotation and provide any delivery details
  3. Confirm your booking
  4. Receive a formal Delivery Confirmation and “What Happens Next” guidance

Is there anything else I will need to do?

For online courses

  • Schedule the event on your video conferencing platform
  • Share joining details with attendees
  • Provide the trainer profile and course overview

For face-to-face courses

  • Book the room/venue and required equipment
  • Share trainer details and course overview with attendees
  • Print and provide handouts to the trainer prior to the session

After the course

  • Distribute post-course handouts and CPD certificates

How does your 12-month post-course support service work?

Email us with any training-related questions that arise following the course. We provide guidance and support relating to the training content covered.

Note: This service is not a substitute for legal advice.

What happens if I have more questions?

We’re here to help. You can contact us at any stage before, during, or after your training programme, and we will be happy to answer any questions you may have.