I understand no one having access to the key, but if data is already encrypted using this key and you want to rotate to a new key, how do you decrypt the old da

I understand no one having access to the key, but if data is already encrypted using this key and you want to rotate to a new key, how do you decrypt the old data? re-encrypt all old data with the new key?