UK GDPR and Data Protection Act 2018: Primary legislation governing the processing of personal data, data protection rights, and obligations for data controllers and processors in the UK
Privacy and Electronic Communications Regulations (PECR): Specific rules for electronic communications, including requirements for cookies, electronic marketing, and communication services
Consumer Rights Act 2015: Legislation protecting consumer rights in relation to goods and services, including digital content and services (applicable for B2C SaaS)
Unfair Contract Terms Act 1977: Controls the use of exclusion and limitation clauses in contracts, ensuring fairness in contractual relationships
Electronic Commerce (EC Directive) Regulations 2002: Regulations governing electronic commerce, including requirements for online service providers and electronic contracts
Consumer Contracts Regulations 2013: Rules regarding distance selling and off-premises contracts, including cancellation rights and information requirements
Copyright, Designs and Patents Act 1988: Primary legislation protecting intellectual property rights, particularly relevant for software and digital content
Trade Marks Act 1994: Legislation governing trademark protection and usage, important for brand protection in SaaS agreements
Electronic Communications Act 2000: Legal framework for electronic signatures and electronic communications in the UK
eIDAS Regulations: Regulations governing electronic identification and trust services, as retained in UK law post-Brexit
Network and Information Systems Regulations 2018: Cybersecurity requirements for digital service providers and essential services operators
Computer Misuse Act 1990: Criminal law relating to unauthorized access to computer systems and data
Supply of Goods and Services Act 1982: Legislation setting out implied terms for the supply of services, including requirements for reasonable care and skill
International Data Transfer Requirements: Rules governing the transfer of personal data outside the UK, including adequacy decisions and appropriate safeguards
Industry-Specific Regulations: Sector-specific requirements such as FCA regulations for financial services or NHS guidelines for healthcare data
