Civil Contingencies Act 2004: Primary legislation that establishes a framework for emergency preparedness and response in the UK, requiring organizations to maintain business continuity plans
Companies Act 2006: Fundamental legislation governing company operations and director responsibilities, including duty to promote company success and risk management
UK General Data Protection Regulation (UK GDPR): Post-Brexit data protection regulation requiring organizations to protect personal data and maintain business continuity for data processing systems
Data Protection Act 2018: UK's implementation of data protection standards, complementing UK GDPR and setting out requirements for data security and business continuity
Network and Information Systems Regulations 2018: Legislation requiring essential service operators and digital service providers to maintain effective cybersecurity and business continuity measures
Health and Safety at Work Act 1974: Primary workplace safety legislation requiring organizations to ensure employee safety during normal operations and emergency situations
Employment Rights Act 1996: Legislation protecting employee rights and establishing obligations during business disruptions and reorganizations
Financial Services and Markets Act 2000: Regulatory framework for financial services firms, including requirements for operational resilience and business continuity
Insurance Act 2015: Legislation governing insurance contracts and disclosure requirements, crucial for business continuity insurance coverage
Computer Misuse Act 1990: Criminal law addressing cybersecurity threats, relevant for IT system protection and cyber incident response planning
Environmental Protection Act 1990: Environmental legislation requiring businesses to manage environmental risks and maintain appropriate contingency plans
ISO 22301: International standard for Business Continuity Management Systems, providing framework for organizational resilience
BS 65000: British Standard for Organizational Resilience, providing guidance on enhancing organizations' ability to anticipate and respond to disruptions
Working Time Regulations 1998: Legislation governing working hours and conditions, relevant for staff deployment during business continuity situations
Privacy and Electronic Communications Regulations: Regulations governing electronic communications and data privacy, important for maintaining communication systems during disruptions
