UK GDPR: The UK General Data Protection Regulation - primary legislation governing data protection and privacy in the UK post-Brexit
Data Protection Act 2018: The UK's implementation of data protection laws, working alongside UK GDPR to provide a comprehensive data protection framework
PECR 2003: Privacy and Electronic Communications Regulations - specific rules for electronic communications, including rules about cookies and marketing communications
Consumer Rights Act 2015: Legislation protecting consumer rights that includes aspects relevant to online services and digital content
E-Commerce Regulations 2002: Electronic Commerce (EC Directive) Regulations governing online business operations and information requirements
Freedom of Information Act 2000: Legislation governing public access to information held by public authorities (relevant if the organization is a public body)
ICO Guidelines: Information Commissioner's Office guidelines and codes of practice providing authoritative guidance on data protection compliance
EDPB Guidelines: European Data Protection Board guidelines that, while not binding post-Brexit, remain influential in UK data protection practice
EU GDPR: European Union General Data Protection Regulation - relevant if serving EU customers or processing EU citizens' data
Data Subject Rights: Mandatory inclusion of information about individuals' rights regarding their personal data, including access, rectification, erasure, and portability
Cookie Requirements: Specific requirements for disclosure of cookie usage and obtaining appropriate consent
International Transfers: Requirements for disclosing and ensuring compliance with international data transfer mechanisms
Data Retention: Requirements to specify and justify data retention periods for different types of personal data
Security Measures: Obligation to describe organizational and technical measures to protect personal data
Children's Privacy: Special considerations and requirements when processing children's personal data
