UK GDPR: The United Kingdom General Data Protection Regulation - the fundamental law governing data protection in the UK post-Brexit, setting out principles for data processing, transfer, and protection
Data Protection Act 2018: The UK's implementation of data protection laws, complementing and supplementing the UK GDPR, providing specific requirements for data processing in the UK context
PECR 2003: Privacy and Electronic Communications Regulations - specific rules for electronic communications, including electronic marketing, cookies, and communication services
EU GDPR: European Union General Data Protection Regulation - relevant for transfers involving EU data subjects or organizations, setting standards for data protection in the EU
Standard Contractual Clauses: Pre-approved contractual terms for international data transfers, ensuring adequate protection when transferring personal data outside the UK/EU
Binding Corporate Rules: Internal rules for data transfers within multinational companies, approved by relevant supervisory authorities to ensure consistent protection standards
Adequacy Decisions: Official determinations that certain countries provide adequate levels of data protection, facilitating easier data transfers to these jurisdictions
NIS Regulations 2018: Network and Information Systems Regulations - cybersecurity requirements for essential services and digital service providers
Common Law Confidentiality: English common law principles governing confidential information and its protection in business relationships
English Contract Law: Fundamental principles of contract formation, interpretation, and enforcement under English law that affect data transfer agreements
ICO Guidelines: Regulatory guidance from the Information Commissioner's Office providing practical interpretation and compliance requirements for UK data protection laws
EDPB Guidelines: European Data Protection Board guidance relevant for international data transfers and compliance with EU data protection requirements
Schrems II Decision: Landmark court decision affecting international data transfers, requiring additional safeguards and transfer impact assessments
