UK GDPR: The United Kingdom General Data Protection Regulation - the primary data protection legislation in the UK post-Brexit, setting out the key principles, rights and obligations for processing personal data
Data Protection Act 2018: The UK's implementation of data protection legislation that works alongside and supplements the UK GDPR, providing specific requirements for certain types of processing
PECR: Privacy and Electronic Communications Regulations 2003 - specific rules for electronic communications, marketing, and cookies
EU GDPR: European Union General Data Protection Regulation - relevant for data transfers involving EU residents/businesses and cross-border processing activities
Standard Contractual Clauses: Legal mechanisms approved by regulatory authorities for ensuring adequate protection of personal data transferred internationally
Adequacy Decisions: Official determinations by relevant authorities regarding which countries provide adequate levels of data protection for international transfers
ICO Guidelines: Official guidance and recommendations from the Information Commissioner's Office, the UK's data protection regulator
EDPB Guidelines: European Data Protection Board guidelines providing interpretation and practical guidance on data protection requirements
UK Data Protection and Digital Information Bill: Upcoming legislation that will introduce changes to the UK's data protection framework
Controller-Processor Requirements: Specific obligations and responsibilities for data controllers and processors, including clear allocation of roles and responsibilities
Data Protection Principles: Core principles including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, and integrity
Data Subject Rights: Requirements for handling individual rights including access, rectification, erasure, portability, and objection to processing
Security Measures: Technical and organizational measures required to ensure appropriate security of personal data
Cross-border Transfer Requirements: Specific requirements and safeguards for transferring personal data across borders
Breach Notification Requirements: Obligations regarding the timing and content of data breach notifications to authorities and affected individuals
Sub-processor Requirements: Rules governing the appointment and oversight of sub-processors, including required authorizations and contracts
Audit Rights: Requirements for establishing audit rights and compliance verification procedures
Liability and Indemnification: Provisions addressing responsibility and compensation for data protection violations
Data Retention and Deletion: Requirements for establishing retention periods and ensuring proper deletion or return of personal data
