Data (Use and Access) Act 2025 s.4-5: Sections 4 and 5: Data holders' duties for business data under data regulations

Data regulations under section 4 can require a data holder to publish business data (information about the goods, services and digital content it supplies, where and on what terms they are supplied, their use, performance and quality, and feedback about them) or to provide it on request to customers or to third parties of a specified description, where necessary only to approved recipients who meet specified conditions; to produce, collect or retain business data; to provide or publish it on one or more occasions or at intervals through specified facilities meeting interface standards; to keep records; to publish information about its activities under the regulations; and to run complaints and dispute procedures, with processors required to assist. A public authority that receives business data as a third party recipient, or a person it appoints, can itself be required to publish or pass on the data (section 4(4)).