UK GDPR: The UK General Data Protection Regulation sets requirements for data protection and privacy, including incident reporting requirements for data breaches
Data Protection Act 2018: The UK's implementation of data protection legislation, complementing the UK GDPR and setting out specific national requirements
PECR: Privacy and Electronic Communications Regulations governing electronic communications, including security requirements for service providers
NIS Regulations 2018: Network and Information Systems Regulations establishing security and incident reporting requirements for operators of essential services and digital service providers
Security of Network & Information Systems Regulations 2018: Framework for improving the security of network and information systems across the UK, including incident response requirements
Financial Services and Markets Act 2000: Primary legislation for financial services regulation in the UK, including requirements for operational resilience and incident management
Companies Act 2006: Core company law legislation including director duties and corporate governance requirements that impact incident response obligations
ISO 27001: International standard for information security management, providing framework for incident response and security controls
ISO 22301: International standard for business continuity management, relevant for incident response planning and recovery
Computer Misuse Act 1990: Criminal law governing computer crimes and unauthorized access, relevant for incident classification and reporting
Fraud Act 2006: Legislation covering fraudulent activities, including cyber fraud, relevant for incident classification and response
Employment Rights Act 1996: Employment law framework including provisions relevant to employee roles and responsibilities in incident response
ICO Guidance: Information Commissioner's Office regulatory guidance on data protection and incident response requirements
NCSC Frameworks: National Cyber Security Centre guidance and frameworks for cyber incident response and management
