UK GDPR: The UK General Data Protection Regulation - Primary legislation governing data protection in the UK post-Brexit, setting out fundamental principles for data processing
DPA 2018: Data Protection Act 2018 - The UK's implementation of data protection standards, complementing and working alongside UK GDPR
PECR: Privacy and Electronic Communications Regulations 2003 - Specific rules for privacy in electronic communications
ICO Guidance: Information Commissioner's Office guidelines and codes of practice - Authoritative guidance on interpreting and implementing data protection requirements
EDPB Guidelines: European Data Protection Board guidelines - While not binding post-Brexit, these remain influential for UK data protection practices
Article 28 Compliance: Specific requirements under UK GDPR Article 28 detailing mandatory processor obligations in data processing agreements
Article 32 Security: Security requirements under UK GDPR Article 32 specifying technical and organizational measures for data protection
International Transfers: Post-Brexit requirements for international data transfers, including adequacy decisions and appropriate safeguards
Sub-processor Requirements: Rules and restrictions governing the appointment and oversight of sub-processors in data processing activities
Breach Notifications: Mandatory requirements for handling and reporting data breaches under UK data protection law
Data Subject Rights: Procedures for handling data subject rights requests and ensuring compliance with UK GDPR requirements
Sector-Specific Regulations: Additional regulatory requirements specific to industries such as financial services (FCA), healthcare (NHS), and public sector
