UK GDPR: The United Kingdom General Data Protection Regulation - the primary data protection legislation in the UK post-Brexit, setting out the key principles, rights and obligations for processing personal data
DPA 2018: The Data Protection Act 2018 - the UK's implementation of data protection law, which complements and supplements the UK GDPR
PECR: Privacy and Electronic Communications Regulations 2003 - specific rules for electronic communications, including electronic marketing and cookies
EU GDPR: European Union General Data Protection Regulation - relevant for cross-border data transfers and organizations operating in both UK and EU
UK Adequacy Regulations: Regulations determining which countries are deemed to provide adequate data protection standards for international data transfers from the UK
IDTA: International Data Transfer Agreement - the UK's mechanism for ensuring appropriate safeguards for international data transfers post-Brexit
UK Addendum: UK Addendum to EU Standard Contractual Clauses - allows organizations to use EU SCCs modified for UK data transfers
FSMA 2000: Financial Services and Markets Act 2000 - relevant for data processing agreements in the financial services sector
FCA Requirements: Financial Conduct Authority regulatory requirements for data protection in the financial services sector
English Contract Law: Common law principles governing contract formation, interpretation and enforcement under English and Welsh jurisdiction
ICO Guidelines: Information Commissioner's Office guidance on data protection compliance and best practices in the UK
EDPB Guidelines: European Data Protection Board guidelines providing interpretation and practical guidance on data protection requirements
