The Data (Use and Access) Act 2026 came into force on 19 June. It introduces a new legal duty for every UK business to handle data protection complaints formally. Here is what changed and the practical steps you need to take.