UK GDPR: The UK General Data Protection Regulation - the primary legislation governing data protection in the UK post-Brexit, setting out the key principles, rights and obligations for processing personal data
Data Protection Act 2018: The UK's implementation of data protection laws, working alongside and supplementing the UK GDPR, providing specific requirements for certain types of data processing
PECR 2003: Privacy and Electronic Communications Regulations - specific rules for electronic communications, including rules about cookies, electronic marketing, and privacy in telecommunications
Freedom of Information Act 2000: Legislation relevant when dealing with public authorities, governing public access to information held by public authorities
Computer Misuse Act 1990: Legislation dealing with cybersecurity and unauthorized access to computer systems, relevant for security measures in data protection
Human Rights Act 1998: Particularly Article 8 which enshrines the right to privacy in UK law, providing a fundamental basis for privacy rights
ICO Guidance: Guidelines and codes of practice from the Information Commissioner's Office, providing practical interpretation and implementation advice for data protection laws
EDPB Guidelines: European Data Protection Board guidelines which, while not binding post-Brexit, remain influential in UK data protection practice
EU GDPR Compliance: Consideration needed if processing EU residents' data, requiring compliance with both UK and EU data protection regimes
International Transfer Requirements: Post-Brexit requirements for transferring data internationally, including adequacy decisions and appropriate safeguards
