UK GDPR and DPA 2018: Key data protection legislation in the UK that governs how personal data must be handled, processed, and protected, including requirements for obtaining valid consent
PECR 2003: Privacy and Electronic Communications Regulations governing electronic marketing, cookies, and electronic communications privacy
Consumer Rights Act 2015: Primary consumer rights legislation covering contracts for goods, services, and digital content, ensuring fairness in consumer transactions
Consumer Contracts Regulations 2013: Regulations covering distance selling and off-premises contracts, including cancellation rights and information requirements
Consumer Protection from Unfair Trading Regulations 2008: Prohibits unfair commercial practices and sets standards for business-to-consumer trading
Unfair Contract Terms Act 1977: Controls unfair terms in contracts, particularly excluding or limiting liability
E-Commerce Regulations 2002: Governs electronic commerce transactions and information society services
Electronic Communications Act 2000: Provides legal framework for electronic signatures and electronic communications
Age Appropriate Design Code: Standards for online services likely to be accessed by children, ensuring age-appropriate design and content
Digital Economy Act 2017: Legislation covering digital industries, including age verification requirements and electronic communications infrastructure
Equality Act 2010: Ensures accessibility and prevents discrimination in provision of services
Financial Services and Markets Act 2000: Regulatory framework for financial services and markets, including consent requirements for financial products
Common Law Contract Principles: Fundamental principles of contract formation, including offer, acceptance, consideration, and intention to create legal relations
EU GDPR Compliance: Additional considerations for services accessible to EU residents, ensuring compliance with EU data protection requirements
