Provisions the documents cite: s.76 (time limits for responding to data subjects' requests: UK GDPR Article 12(3), (4) and (6) amended and new Article 12A; DPA 2018 ss.45, 54 and 94 amended), in force 5 February 2026; the other Part 5 Chapter 1 amendments in force as annotated below
What it requires
Amends the UK GDPR and the Data Protection Act 2018; cite the amended provision as "UK GDPR Article …" (register entry dpa-2018) and this Act for the amendment. s.76, in force 5 February 2026: Article 12(3) now requires information on action taken on a data subject's request before the end of the applicable time period, Article 12(4) requires reasons for not acting without undue delay and in any event within that period, and Article 12(6) lets a controller with reasonable doubts about identity delay dealing with the request until identity is confirmed. New Article 12A — the applicable time period is one month beginning with the relevant time, which is the latest of receipt of the request, receipt of any identity information requested under Article 12(6), and payment of any fee charged under Article 12(5). The controller may extend it by two further months, where necessary because of the complexity or number of the data subject's requests, by a notice giving reasons before the end of the first month. Where the controller reasonably requires further information to identify the information or processing an Article 15 access request relates to — for example because it holds a large amount of information about the person — it may ask for it, and the time until it is received does not count. From legislation.gov.uk's commencement annotations (text not read): ss.67, 68, 70, 71, 77 and 80 and Schedule 4 in force 5 February 2026 (S.I. 2026/82); s.69 in force 19 August 2025; ss.72, 74, 106 and 107 in force 20 August 2025 (S.I. 2025/904); s.78 (searches in response to data subjects' requests) in force on Royal Assent, 19 June 2025; s.103 (complaints by data subjects) in force 19 June 2026 (S.I. 2026/82 reg 3(a)).
The instrument itself: https://www.legislation.gov.uk/ukpga/2025/18. The summary above is our plain-English reading, not the text of the instrument — always work from the source.
How this entry is kept current
- Citation status: read in full at the primary source.
- Watched by: legislation.gov.uk "Changes to Legislation" tab — several provisions commence by regulations; check the commencement annotations each scan.
- Source last checked by the automated scan: not yet — first scan pending.
Every source is re-checked monthly and the result is published in the scan log. A change that alters what a document should say raises a revision, and past buyers of that document are told.
The 1 document that cite it
Every KubitDocs document prints its statutory basis on the form itself, so the person signing can verify the citation rather than take our word for it.