UK GDPR: The UK General Data Protection Regulation - the primary data protection legislation in the UK post-Brexit, governing how personal data must be processed, stored and protected
DPA 2018: The Data Protection Act 2018 - the UK's implementation of data protection legislation that works alongside and supplements the UK GDPR
PECR: Privacy and Electronic Communications Regulations 2003 - specific rules governing electronic communications, including marketing, cookies, and privacy in telecommunications
EU GDPR: European Union General Data Protection Regulation - relevant for any data transfers between UK and EU, or when dealing with EU data subjects
International Transfer Mechanisms: Frameworks for transferring data internationally, including adequacy decisions, Standard Contractual Clauses (SCCs), and Binding Corporate Rules (BCRs)
NIS Regulations: Network and Information Systems Regulations 2018 - focusing on network and information systems security, particularly for essential services and digital service providers
Freedom of Information Act: Freedom of Information Act 2000 - relevant when dealing with public sector organizations and their data processing obligations
ICO Guidelines: Information Commissioner's Office guidelines and codes of practice - authoritative guidance on interpreting and implementing UK data protection laws
EDPB Guidelines: European Data Protection Board guidelines - relevant for understanding EU data protection requirements and best practices, particularly for cross-border processing
Industry-Specific Regulations: Sector-specific data protection requirements, including financial services regulations, healthcare data protection requirements, and marketing regulations
