UK GDPR: UK General Data Protection Regulation - Primary legislation governing data protection in the UK post-Brexit, setting out fundamental principles for data processing, including specific requirements for controller-processor relationships under Article 28 and security measures under Article 32
DPA 2018: Data Protection Act 2018 - The UK's implementation of data protection legislation, including specific provisions for special category data processing under Schedule 1
PECR: Privacy and Electronic Communications Regulations 2003 - Specific rules for privacy and electronic communications, complementing general data protection laws
Common Law Duty of Confidentiality: Legal principle under English and Welsh common law requiring maintenance of confidentiality where information is shared in circumstances implying an obligation of confidence
English and Welsh Contract Law: General principles of contract law that govern the formation and enforcement of agreements under the jurisdiction of England and Wales
Freedom of Information Act 2000: Legislation governing public access to information held by public authorities, relevant when public sector bodies are involved in data sharing
ICO Controller-Processor Guidance: Regulatory guidance from the Information Commissioner's Office specifically addressing requirements and best practices for controller-processor relationships
ICO Data Sharing Guidance: Regulatory guidance from the Information Commissioner's Office on best practices and requirements for data sharing agreements
EDPB Guidelines: European Data Protection Board guidelines which, while not binding post-Brexit, remain influential in UK data protection practice and interpretation
