UK firms urged to prepare for phased Data Use and Accountability Act (DUAA) changes, impacting AI, cookies, DSARs and data transfers. Fines for non-compliance.