UK GDPR: The UK General Data Protection Regulation - Primary legislation governing how personal data must be processed, stored, and protected in the UK post-Brexit
Data Protection Act 2018: The UK's implementation of data protection laws, working alongside UK GDPR to provide a comprehensive data protection framework
PECR 2003: Privacy and Electronic Communications Regulations governing electronic communications, including emails, cookies, and telecommunications
Computer Misuse Act 1990: Legislation criminalizing unauthorized access to computer systems and data, relevant for security measures and breach responses
Human Rights Act 1998: Specifically Article 8, establishing the fundamental right to privacy in UK law
Financial Services and Markets Act 2000: Regulatory framework for financial services sector, including specific data protection requirements for financial institutions
Payment Services Regulations 2017: Regulations governing payment services, including security requirements for payment data
NIS Regulations 2018: Network and Information Systems Regulations establishing security requirements for essential services and digital providers
EU GDPR Compliance: Consideration of EU GDPR requirements when handling EU citizens' data or operating across UK-EU borders
ICO Guidelines: Regulatory guidance from the Information Commissioner's Office on data protection and security requirements
NCSC Frameworks: Security frameworks and guidance provided by the National Cyber Security Centre for protecting data and systems
Common Law Duty of Confidentiality: Legal obligation to maintain confidentiality of information received in confidence or in specific professional relationships
ISO 27001: International standard for information security management systems, providing framework for data security policies
