UK GDPR: UK General Data Protection Regulation - Core data protection legislation governing how personal data must be handled, processed, and protected throughout the SDLC
Data Protection Act 2018: UK's implementation of data protection legislation that works alongside UK GDPR, providing specific national requirements for data protection
PECR: Privacy and Electronic Communications Regulations - Specific rules for electronic communications, cookies, and digital marketing security
NIS Regulations 2018: Network and Information Systems Regulations - Requirements for essential service operators and digital service providers to maintain secure systems
Security of Network & Information Systems Regulations 2018: Regulatory framework establishing security standards for network and information systems across essential services
Financial Services and Markets Act 2000: Primary legislation for financial services regulation, including requirements for secure systems and data protection in financial institutions
Computer Misuse Act 1990: Legislation governing unauthorized access to computer systems, relevant for security testing and penetration testing activities
Electronic Communications Act 2000: Legal framework for electronic signatures and records, affecting how secure documentation and approvals are handled
ISO 27001: International standard for information security management, providing framework for securing information assets
NIST Cybersecurity Framework: Voluntary framework of computer security guidance for organizations to better manage and reduce cybersecurity risk
OWASP Security Standards: Open Web Application Security Project guidelines for secure software development and testing
CIS Controls: Center for Internet Security Controls - Prescribed set of actions for cyber defense and security improvement
EU NIS Directive: European Union directive for network and information security, relevant for organizations operating in or with the EU
NHS Digital Standards: Specific security and data protection standards for healthcare sector software development and deployment
NCSC Guidelines: National Cyber Security Centre guidance for secure systems development and operation in government contexts
