UK GDPR and Data Protection Act 2018: Primary legislation governing the processing, handling and protection of personal data in the UK post-Brexit. Essential for websites collecting or processing user data.
Privacy and Electronic Communications Regulations (PECR) 2003: Specific rules for electronic communications, including website cookie requirements and electronic marketing regulations.
Consumer Rights Act 2015: Key legislation protecting consumer rights in service contracts, particularly relevant if the website serves consumers/B2C operations.
Unfair Contract Terms Act 1977: Regulates contractual terms that might unfairly exclude or restrict liability, ensuring balance in commercial contracts.
Supply of Goods and Services Act 1982: Sets out implied terms for service contracts, including requirements for reasonable care and skill in service provision.
Electronic Commerce (EC Directive) Regulations 2002: Governs electronic commerce and online business operations, including requirements for online service providers.
Copyright, Designs and Patents Act 1988: Protects intellectual property rights related to website content, code, and design elements.
Equality Act 2010: Mandates consideration of accessibility requirements and non-discrimination in website design and maintenance.
Network and Information Systems Regulations 2018: Sets cybersecurity requirements and incident reporting obligations for digital service providers.
Computer Misuse Act 1990: Relevant for security provisions and protecting against unauthorized access to computer systems.
ISO/IEC 27001: International standard for information security management, providing framework for website security measures.
PCI DSS: Payment Card Industry Data Security Standard - mandatory if the website handles payment card data.
