Civil Contingencies Act 2004: Primary legislation that establishes a framework for emergency preparedness and response in the UK, requiring organizations to maintain plans for ensuring business continuity in the event of emergencies.
Companies Act 2006: Fundamental company law that sets out directors' duties including the duty to promote company success and maintain appropriate governance structures.
Data Protection Act 2018 & UK GDPR: Legislative framework governing how personal data must be protected, processed, and maintained, including during business disruptions.
Financial Services Regulations (FCA/PRA): Regulatory requirements for financial institutions regarding operational resilience and business continuity planning.
Health and Safety at Work Act 1974: Primary legislation ensuring workplace safety and health, which must be maintained even during business continuity scenarios.
Management of Health and Safety at Work Regulations 1999: Detailed requirements for risk assessment and management of health and safety in the workplace.
Employment Rights Act 1996: Legislation protecting employees' rights which must be considered in business continuity planning, especially regarding alternative working arrangements.
Working Time Regulations 1998: Rules governing working hours and conditions that must be maintained even during business disruption.
Network and Information Systems Regulations 2018: Legislation ensuring security of network and information systems, particularly relevant for digital continuity planning.
Privacy and Electronic Communications Regulations: Regulations governing electronic communications and data privacy that must be maintained during business continuity scenarios.
Environmental Protection Act 1990: Legislation concerning environmental protection that must be considered in business continuity planning, especially for industrial operations.
Control of Major Accident Hazards Regulations 2015: Regulations for preventing and managing major industrial accidents, crucial for high-risk industry continuity planning.
NIS Regulations 2018: Specific requirements for operators of essential services and digital service providers regarding network and information security.
Insurance Act 2015: Legislation governing insurance contracts and disclosure requirements, important for business continuity insurance coverage.
Third Party Rights Against Insurers Act 2010: Legislation protecting third party rights in insurance matters, relevant for business continuity insurance arrangements.
