UK GDPR: The United Kingdom General Data Protection Regulation - Primary legislation governing data protection in the UK post-Brexit, setting out fundamental principles for personal data processing
Data Protection Act 2018: The UK's implementation of data protection laws, working alongside UK GDPR to provide a comprehensive data protection framework
PECR 2003: Privacy and Electronic Communications Regulations - Specific rules for electronic communications, including rules about cookies and electronic marketing
ICO Guidelines: Guidance and Codes of Practice from the Information Commissioner's Office - The UK's data protection regulator providing practical guidance on compliance
EDPB Guidelines: European Data Protection Board Guidelines - While not directly binding post-Brexit, still considered relevant best practice for UK data protection
Transparency Requirements: Articles 13/14 of UK GDPR requiring clear information about data processing to be provided to data subjects
Lawful Basis: Legal requirement to identify and document valid grounds for processing personal data under Article 6 of UK GDPR
Purpose Limitation: Principle requiring personal data to be collected for specified, explicit and legitimate purposes and not processed in a manner incompatible with those purposes
Data Minimization: Principle requiring personal data to be adequate, relevant and limited to what is necessary for the purposes for which they are processed
Storage Limitation: Principle requiring personal data to be kept for no longer than necessary for the purposes for which it is processed
Data Subject Rights: Rights granted to individuals under UK GDPR including access, rectification, erasure, and data portability
International Transfers: Requirements for transferring personal data outside the UK, including adequate safeguards and transfer mechanisms
Security Measures: Requirements to implement appropriate technical and organizational measures to ensure security of personal data
