Data protection might not always make the headlines but, for charities, it sits right at the intersection of trust, transparency, and impact.
Every donation, volunteer record, beneficiary story, or supporter email list involves personal data, and how charities handle that information says a lot about their integrity and professionalism.
In June 2025, the Data Use and Access Act became law, marking the most significant change to UK data protection rules since GDPR came into effect. The legislation aims to make the UK’s data framework more flexible and innovation-friendly, while still maintaining robust standards of privacy and accountability.
But what does this mean in practice, especially for charities, which often rely on data to understand their supporters, deliver services, and measure impact?
A new chapter for data protection
The new Act introduces a series of updates that will unfold over the coming months. Some of these changes will apply across all sectors, while others have particular implications for charities. The reforms aim to:
- Simplify some compliance requirements, especially for low-risk data uses.
- Clarify the rules around consent, legitimate interest, and data sharing.
- Adjust how organisations demonstrate accountability and handle subject access requests.
- Create new opportunities to make better use of data for research, insight, and service improvement.
For charities, this presents both challenges and opportunities. While some administrative burdens may be reduced, trustees and leaders will need to ensure that governance, culture, and communication around data remain strong.
Why it matters for your charity
Charities hold some of the most sensitive personal data imaginable, covering beneficiaries, donors, service users, and staff. Any loss of trust can be reputationally devastating, and strong data governance is a cornerstone of a charity’s public credibility.
The new law could make it easier to understand supporter behaviour, target fundraising more effectively, or measure outcomes in new ways. The key is to be informed, proactive, and prepared.
Join our upcoming webinar
To help charity leaders, trustees, and data protection officers navigate these changes, we’re hosting a live webinar, ‘Data Protection for charities – what’s changing and what’s not?’, on 23 October.
In this session, Carla Whalen, a partner in the charity and not-for-profit team at Russell-Cooke solicitors, will:
- Provide a refresher on key data protection principles, including lawful processing, transparency, and accountability.
- Explain what’s changing under the new legislation and how those changes apply to charities.
- Outline practical steps your charity can take now to prepare — and to embrace the opportunities the Act introduces.
Whether you’re a trustee or finance leader, this webinar will equip you with the knowledge to protect your charity’s data and its reputation with confidence.
