UK GDPR: UK General Data Protection Regulation - Primary legislation governing data protection and privacy in the UK post-Brexit, setting out fundamental principles for data processing
DPA 2018: Data Protection Act 2018 - The UK's implementation of data protection laws, working alongside UK GDPR to provide comprehensive data protection framework
PECR 2003: Privacy and Electronic Communications Regulations 2003 - Specific rules for electronic communications, including rules on cookies, marketing calls, emails, and text messages
Human Rights Act 1998: Incorporates Article 8 of the European Convention on Human Rights into UK law, establishing the fundamental right to privacy
Freedom of Information Act 2000: Legislation relevant for public bodies, governing public access to information held by public authorities
Computer Misuse Act 1990: Legislation addressing unauthorized access to computer systems and data, relevant for security provisions in privacy agreements
ICO Guidelines: Information Commissioner's Office guidelines and codes of practice providing authoritative guidance on data protection compliance
EDPB Guidelines: European Data Protection Board guidelines that remain relevant post-Brexit for best practices and international data transfers
Data Subject Rights: Rights granted to individuals including access, rectification, erasure, portability, and objection to processing
International Transfer Requirements: Post-Brexit requirements for transferring personal data outside the UK, including adequacy decisions and appropriate safeguards
Breach Notification Procedures: Requirements for reporting data breaches to authorities and affected individuals within specified timeframes
Data Retention Requirements: Principles and requirements governing how long personal data can be retained and when it must be deleted
Security Measures: Technical and organizational measures required to ensure appropriate security of personal data
Processing Records: Requirements for maintaining records of processing activities as part of accountability obligations
