UK GDPR: The UK General Data Protection Regulation - the primary data protection legislation in the UK post-Brexit, setting out the key principles, rights and obligations for processing personal data
Data Protection Act 2018: The UK's implementation of data protection legislation that works alongside the UK GDPR, providing additional requirements and specifications for data protection in the UK context
PECR 2003: Privacy and Electronic Communications Regulations - specific rules for electronic communications, including rules about marketing, cookies and electronic communications security
Freedom of Information Act 2000: Legislation providing public access to information held by public authorities, relevant if the organization is a public body
Computer Misuse Act 1990: Legislation dealing with cybercrime and unauthorized access to computer systems, relevant for data security provisions
Human Rights Act 1998: Particularly Article 8 which enshrines the right to privacy in UK law
ICO Guidelines: Regulatory guidance and codes of practice issued by the Information Commissioner's Office, the UK's data protection regulator
EDPB Guidelines: European Data Protection Board guidelines which, while not binding post-Brexit, remain influential in UK data protection practice
EU GDPR Compliance: Consideration needed if processing EU citizens' data, requiring compliance with the EU version of GDPR
International Transfer Requirements: Rules and requirements for transferring personal data internationally, including adequacy decisions and appropriate safeguards
Financial Services Regulations: Sector-specific data protection requirements for financial services organizations
Healthcare Data Protection: Specific requirements for processing healthcare data, including additional safeguards for special category data
Children's Data Protection: Special provisions and requirements for processing children's personal data
