UK GDPR and Data Protection Act 2018: Primary data protection legislation in the UK that governs how personal data must be handled, processed, and protected in cloud services
Privacy and Electronic Communications Regulations (PECR): Specific rules for privacy in electronic communications, including requirements for cookies and electronic marketing
Consumer Rights Act 2015: Key legislation protecting consumer rights in the UK, particularly relevant if the cloud service is provided to individual consumers (B2C)
Consumer Contracts Regulations 2013: Regulations governing distance selling and online contracts with consumers, including cancellation rights and information requirements
Unfair Contract Terms Act 1977: Legislation controlling unfair terms in contracts, particularly relevant for limitation of liability clauses in SLAs
Electronic Commerce Regulations 2002: Regulations governing electronic commerce activities, including requirements for service provider information and commercial communications
Electronic Communications Act 2000: Legislation providing legal recognition of electronic signatures and supporting electronic commerce
Network and Information Systems Regulations 2018: Cybersecurity regulations requiring digital service providers to manage security risks and report major incidents
Financial Services and Markets Act 2000: Regulatory framework for financial services in the UK, relevant if the cloud service handles financial data or serves financial institutions
Common Law Contract Principles: Fundamental principles of English contract law including offer, acceptance, consideration, and intention to create legal relations
Misrepresentation Act 1967: Legislation dealing with false or misleading statements made during contract formation
International Data Transfer Requirements: Rules governing the transfer of personal data outside the UK, including adequacy decisions and Standard Contractual Clauses
Competition Act 1998: Legislation preventing anti-competitive practices and abuse of dominant market position in service provision
Enterprise Act 2002: Framework for merger control and market investigations, relevant for cloud service providers with significant market presence
