diff --git a/NEWS b/NEWS
index ff55bbcaa3..d51b5d5e03 100644
--- a/NEWS
+++ b/NEWS
@@ -19,6 +19,18 @@ CHANGES WITH 258 in spe:
           option. (This effectively means "mesg n" is now the default, rather
           than "mesg y", see mesg(1) man page for help.)
 
+        * ACLs for device nodes requested by "uaccess" udev tag are now always
+          applied/updated by systemd-udevd through "uaccess" udev builtin, and
+          systemd-logind no longer applies/updates ACLs but triggers "change"
+          uevents to make systemd-udevd apply/update ACLs. Hence, the "uaccess"
+          udev tag should be set not only on "add" action but also on "change"
+          action, and it is highly recommended that the rule is applied all
+          actions except for "remove" action.
+          Recommended example:
+              ACTION!="remove", SUBSYSTEM=="hidraw", TAG+="uaccess"
+          The following example does not work since v258:
+              ACTION=="add", SUBSYSTEM=="hidraw", TAG+="uaccess"
+
         * systemd-run's --expand-environment= switch, which was disabled
           by default when combined with --scope, has been changed to be
           enabled by default. This brings cmdline expansion of transient