Data (Use and Access) Act 2025
Part 1: Access to customer data and business data (smart data schemes) – Data (Use and Access) Act 2025

Data (Use and Access) Act 2025 s.2-3: Sections 2 and 3: Data holders' duties for customer data under data regulations

Where data regulations under section 2 cover a sector, a data holder (the trader, or anyone who processes the trader's customer data in the course of a business) can be required to provide customer data to the customer, or to a person the customer has authorised, on request, once or repeatedly, for a period or at intervals; to use specified facilities such as dashboards, other electronic communications services or application programming interfaces and meet the standards and arrangements set for them; to produce, collect, retain or rectify customer data at the customer's or authorised person's request; to keep records of the data provided; to publish information about customers' rights and about its own activities under the regulations; to run complaints procedures and take part in dispute resolution; and, for processors, to help the trader comply. Regulations may also let an authorised person act for the customer with the trader (section 2(4)). Customer data includes information about goods, services and digital content supplied and about their price, use and performance, including supply before the section came into force. Nothing in the regulations authorises processing that contravenes the data protection legislation (section 20(2)).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Part 1: Access to customer data and business data (smart data schemes) – Data (Use and Access) Act 2025

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.