UK GDPR: General Data Protection Regulation as retained in UK law post-Brexit, providing the fundamental framework for data protection and privacy
Data Protection Act 2018: The UK's implementation of data protection laws, working alongside UK GDPR to provide comprehensive data protection regulations
PECR 2003: Privacy and Electronic Communications Regulations, specifically regulating the use of cookies and similar technologies in the UK
ICO Guidance: Official guidelines from the Information Commissioner's Office on the implementation of cookie regulations and similar technologies
EDPB Guidelines: European Data Protection Board guidelines which, while not binding post-Brexit, remain influential in UK privacy practices
Consent Requirements: Legal requirements for valid consent including: freely given, specific, informed, and clear affirmative action, with easy withdrawal options
Cookie Categories: Classification of cookies into strictly necessary, preference/functionality, statistics/analytics, and marketing/targeting categories
Transparency Requirements: Obligations to provide clear information about cookies used, their purposes, duration, third-party involvement, and control mechanisms
Technical Implementation: Specific technical requirements including no pre-ticked boxes, justified cookie walls if used, and clear opt-in/opt-out mechanisms
