Data Protection Act 2018: Primary UK legislation governing data protection, implementing and supplementing the UK GDPR, setting out requirements for personal data processing and protection
UK GDPR: Post-Brexit version of EU GDPR, providing framework for data protection in the UK, including requirements for data security and breach notification
Computer Misuse Act 1990: Legislation criminalizing unauthorized access to computer systems and data, relevant for addressing phishing attacks and cybercrime
Privacy and Electronic Communications Regulations 2003: Regulations governing electronic communications, including requirements for electronic marketing and communication security
Network and Information Systems Regulations 2018: Framework for cybersecurity requirements, particularly for essential services and digital service providers
ICO Guidelines: Regulatory guidance from the Information Commissioner's Office on data protection and security best practices
NCSC Guidance: National Cyber Security Centre's recommendations and best practices for cybersecurity and phishing prevention
FCA Requirements: Financial Conduct Authority regulations relevant to financial services firms regarding cyber security and customer protection
Employment Rights Act 1996: Legislative framework for employment rights, relevant for employee training and responsibilities in phishing prevention
Health and Safety at Work Act 1974: Legislation concerning workplace safety, including psychological wellbeing related to cyber threats and stress
PCI DSS: Payment Card Industry Data Security Standard requirements for organizations handling payment card data
EU GDPR: European Union data protection regulation, relevant for organizations operating across UK and EU borders
