UK GDPR: The UK General Data Protection Regulation - Primary legislation governing data protection in the UK post-Brexit, particularly Article 15 regarding right of access
DPA 2018: Data Protection Act 2018 - The UK's implementation of data protection laws, including specific provisions and exemptions under Schedule 2
ICO Guidelines: Information Commissioner's Office Guidelines on DSARs - Regulatory guidance providing practical interpretation and implementation requirements for handling Data Subject Access Requests
EDPB Guidelines: European Data Protection Board Guidelines - While not directly binding post-Brexit, still provides relevant guidance for best practices in data protection
Time Limit Requirements: Statutory response time of one month for DSARs, with possibility of two-month extension for complex requests
Fee Regulations: Rules regarding DSAR fees - Generally free of charge, unless requests are manifestly unfounded or excessive
Identification Requirements: Guidelines for verifying the identity of individuals making DSARs to ensure data security and prevent unauthorized access
Format Requirements: Specifications for acceptable formats of DSAR submissions and responses, including electronic and written formats
FOIA 2000: Freedom of Information Act 2000 - Relevant for public bodies handling DSARs alongside other information requests
PECR: Privacy and Electronic Communications Regulations - Complementary regulations affecting electronic communications and relevant to data protection
