Legislation – Data (Use and Access) Act 2025

Revised legislation carried on this site may not be fully up to date. At the current time any known changes or effects made by subsequent legislation have been applied to the text of the legislation you are viewing by the editorial team. Please see ‘Frequently Asked Questions’ for details regarding the timescales for which new effects are identified and recorded on this site.

Part 1Access to customer data and business data

Supplementary

25Other defined terms

(1)

In this Part—

“application programming interface” means a facility for allowing software to make use of facilities contained in other software;

“dashboard service” means an electronic communications service by means of which information may be requested by and provided to a person;

“digital content” means data which is produced and supplied in digital form;

“electronic communications service” has the meaning given by section 32 of the Communications Act 2003;

“goods” includes water, gas and electricity (however supplied);

“micro business” has the meaning given by section 33 of the Small Business, Enterprise and Employment Act 2015, read with any regulations under that section;

“primary legislation” means—

(a)

an Act of Parliament;

(b)

an Act of the Scottish Parliament;

(c)

a Measure or Act of Senedd Cymru;

(d)

Northern Ireland legislation;

“processing” has the same meaning as in the Data Protection Act 2018 (see section 3(4) of that Act) and related terms are to be interpreted accordingly;

“public authority” means a person whose functions—

(a)

are of a public nature, or

(b)

include functions of that nature;

“small business” has the meaning given by section 33 of the Small Business, Enterprise and Employment Act 2015, read with any regulations under that section;

“specified” means specified, or of a description specified, by regulations under this Part, or in exercise of a power conferred by such regulations, except to the extent otherwise provided in this Part;

“third party recipient” means—

(a)

in section 3, a third party in relation to customer data (see section 2(2)),

(b)

in sections 4 and 5, a third party recipient in relation to business data (see section 4(2)), and

(c)

in other sections, a third party recipient in relation to customer data or business data (see sections 2(2) and 4(2)).

(2)

In this Part, references to doing something “in the course of a business” include doing something in the course of—

(a)

a trade, craft or profession, or

(b)

any other undertaking carried on for gain or reward.

(3)

In this Part—

(a)

references to making arrangements include producing model arrangements,

(b)

references to managing a facility (or an interface that is a facility) include operating, or overseeing the operation, of a facility,

(c)

references to managing a service (or an interface that is a service) include providing, or overseeing the provision of, a service, and

(d)

references to managing standards or arrangements include assisting people to use them or overseeing how they are used.

(4)

In this Part, references to regulations made under subsection (3) of section 4 or any of sections 5 to 21 (and references which include such regulations) include regulations made under section 4(4)(c) or (d) which make provision that could be made under the other subsection or section.