UK GDPR and Data Protection Act 2018: Core data protection legislation governing how personal data must be handled, processed, and protected. Essential for websites collecting any user data.
Privacy and Electronic Communications Regulations (PECR) 2003: Specific rules for electronic communications, including requirements for cookie consent and electronic marketing.
Electronic Commerce (EC Directive) Regulations 2002: Governs online business operations, including requirements for transparent trading and information provision on websites.
Consumer Rights Act 2015: Protects consumer rights in digital content and services, relevant if the website provides B2C services.
Consumer Contracts Regulations 2013: Regulates distance selling and online contracts with consumers, including cancellation rights and information requirements.
Copyright, Designs and Patents Act 1988: Protects intellectual property rights in website content, code, and design elements.
Trade Marks Act 1994: Governs the use of trademarks and brand elements on the website.
Equality Act 2010: Requires websites to be accessible to users with disabilities and prevents discrimination.
Public Sector Bodies Accessibility Regulations 2018: Specific requirements for public sector website accessibility, including WCAG compliance.
Online Safety Bill: Upcoming legislation addressing online safety and content moderation requirements.
Unfair Contract Terms Act 1977: Regulates what terms can be included in contracts and protects against unreasonable terms.
Supply of Goods and Services Act 1982: Sets standards for service provision, including requirements for reasonable care and skill.
Network and Information Systems Regulations 2018: Mandates cybersecurity requirements for digital service providers.
Computer Misuse Act 1990: Addresses cybercrime and unauthorized access to computer systems, relevant for security provisions.
Electronic Communications Act 2000: Provides legal framework for electronic signatures and electronic communications.
PCI DSS Standards: Payment Card Industry Data Security Standards - mandatory if handling payment card data on the website.
ISO Standards: International standards for quality management and information security, often referenced in professional website management contracts.
