UK GDPR and Data Protection Act 2018: Core data protection legislation in the UK that governs how personal data must be processed, stored, and transferred, including in third-party relationships
Financial Services and Markets Act 2000: Primary legislation for financial services regulation in the UK, including requirements for third-party oversight in financial institutions
Money Laundering Regulations 2017: Regulations requiring organizations to have systems and controls to prevent money laundering, including due diligence on third parties
Modern Slavery Act 2015: Legislation requiring organizations to ensure their supply chains and third-party relationships are free from slavery and human trafficking
Bribery Act 2010: Anti-corruption legislation that holds organizations liable for bribery committed by associated persons, including third parties
Competition Act 1998: Legislation governing anti-competitive behavior, which must be considered in third-party relationships and agreements
Network and Information Systems Regulations 2018: Cybersecurity legislation requiring organizations to maintain secure systems and assess security risks, including those from third parties
Public Contracts Regulations 2015: Regulations governing public procurement and third-party contracting in the public sector
ISO 27001: International standard for information security management, including requirements for supplier relationships and third-party security assessment
ISO 31000: International standard providing principles and guidelines for effective risk management, including third-party risk assessment
