UK GDPR: UK General Data Protection Regulation - Primary legislation governing data protection in the UK post-Brexit, setting out fundamental principles for personal data processing
DPA 2018: Data Protection Act 2018 - The UK's implementation of data protection law, complementing and supplementing the UK GDPR
PECR: Privacy and Electronic Communications Regulations 2003 - Specific rules for electronic communications, including rules about cookies and electronic marketing
EU GDPR: European Union General Data Protection Regulation - Relevant for data transfers between UK and EU, and when dealing with EU residents' data
Common Law Confidentiality: Common law duty of confidentiality - Legal obligation to keep certain information confidential, based on case law and legal precedent
Human Rights Act: Human Rights Act 1998 (Article 8) - Establishes the fundamental right to privacy in UK law
ICO Consent Guidelines: Information Commissioner's Office guidance on obtaining valid consent, including requirements for it to be freely given, specific, informed, and unambiguous
ICO Privacy Notice Guidelines: Information Commissioner's Office guidance on drafting clear and comprehensive privacy notices
Data Subject Rights: Rights granted to individuals under data protection law, including access, rectification, erasure, and data portability
International Transfer Rules: Requirements and mechanisms for lawfully transferring personal data internationally, particularly between UK and other jurisdictions
Data Retention Requirements: Legal obligations regarding how long personal data can be kept and requirements for documenting retention periods
Withdrawal of Consent: Legal requirement to inform individuals of and honor their right to withdraw consent at any time
