UK GDPR: General Data Protection Regulation as incorporated into UK law post-Brexit, providing the fundamental framework for data protection and privacy
Data Protection Act 2018: The UK's implementation of data protection laws, working alongside UK GDPR to provide comprehensive data protection framework
PECR 2003: Privacy and Electronic Communications Regulations (as amended) - specifically regulates the use of cookies and similar technologies
ICO Guidance: Information Commissioner's Office guidelines on cookie compliance and implementation requirements
EDPB Guidelines: European Data Protection Board guidelines retained as best practice reference for cookie compliance
Consent Requirements: Legal requirements for valid consent: must be freely given, specific, informed, and through clear affirmative action, with easy withdrawal options
Information Obligations: Mandatory disclosures including cookie types, purposes, duration, third-party involvement, and consent management options
Technical Classifications: Categories of cookies including essential, analytics, marketing, and functionality cookies, each with specific compliance requirements
International Compliance: Considerations for cross-border data transfers and international privacy standards when cookies affect users across jurisdictions
