meta_id 3020533

On 26 March 2026, the United Kingdom made the Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (Statutory Instrument 2026 No. 386), which implements consequential amendments arising from the Data (Use and Access) Act 2025. The regulations establish the Information Commission as a body corporate and abolish the office of the Information Commissioner, transferring all functions of the Information Commissioner to the newly created Information Commission. The amendments affect numerous pieces of legislation across the United Kingdom, including primary legislation, subordinate legislation, and assimilated direct legislation. Key legislative instruments amended include the Freedom of Information Act 2000, the Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), and various Scottish, Welsh, and Northern Ireland legislation. The regulations replace all references to "Information Commissioner" with "Information Commission" throughout affected legislation and update related terminology, including pronouns and possessive forms, to reflect the Commission's status as a body corporate rather than an individual office. The regulations come into force when section 119 (transfer of functions to the Information Commission) of the Data (Use and Access) Act 2025 is fully brought into force. Certain provisions have staggered commencement dates linked to the coming into force of specific sections of the 2025 Act, including sections 103 (complaints by data subjects) and 160(5)(d) of the Online Safety Act 2023. Transitional provisions maintain pension arrangements for the person holding the office of Information Commissioner who becomes the first chair of the Information Commission.