Preparing your firm for GDPR & DUAA Changes

From June 2026 all provisions of the Data (Use and Access) Act 2025 (DUAA) are now in force. This includes the new mandatory complaints-handling procedure.

Does your GDPR training still reflect the law as it stands, or the law as it stood when staff were last trained?

The risks aren’t hypothetical. In April 2025, the ICO fined DPP Law £60,000 following a ransomware attack; citing delayed breach notification and outdated systems among the firm’s failings.

Ensure your firm remains compliant with a live, interactive GDPR training session delivered exclusively for your firm

This practical one-hour session is tailored to your firm and includes a scoping call before delivery to ensure the content reflects your specific requirements and risk profile.

• Background to GDPR, Brexit and the Data (Use and Access) Act 2025 (DUAA)
• Refresh of key GDPR definitions
• Understanding personal data
• Special category data
• Controllers and processors
• Data protection principles
• Accountability and record-keeping requirements
• Lawful processing under Articles 6 and 9
• Legitimate interests and changes introduced by the DUAA
• Privacy notices and marketing consent
• Subject rights and access requests
• Complaints procedures
• Identifying and handling data breaches
• Practical examples of where things have gone wrong
• Key takeaways and actions for your firm

This training is delivered live and allows your team to ask questions in real time.

Following the session, all registered staff will receive access to the recording and presentation slides, supporting ongoing compliance and ensuring absent employees can complete the training at a later date.

Get started

For full details and to get started, contact us, email [email protected] or call 020 3051 2049