UK GDPR: The UK General Data Protection Regulation - the primary legislation governing data protection in the UK post-Brexit, setting out the key principles, rights, and obligations for processing personal data
Data Protection Act 2018: The UK's implementation of data protection laws, working alongside and supplementing the UK GDPR, providing specific provisions for certain types of data processing
PECR 2003: Privacy and Electronic Communications Regulations governing electronic communications, including rules on cookies, marketing calls, emails, and text messages
Freedom of Information Act 2000: Legislation providing public access to information held by public authorities, relevant if the DPA involves public sector organizations
NIS Regulations 2018: Network and Information Systems Regulations applying to digital service providers and essential services, setting security and incident reporting requirements
Common Law Duty of Confidentiality: Legal principle requiring information shared in confidence to be kept confidential, supplementing statutory data protection obligations
ICO Guidance: Official guidance and codes of practice from the Information Commissioner's Office, providing practical interpretation of data protection requirements
EDPB Guidelines: European Data Protection Board guidelines which, while not binding post-Brexit, remain influential in UK data protection practice
EU GDPR: European Union General Data Protection Regulation, relevant when processing data of EU residents or operating across UK-EU borders
UK Data Transfer Mechanisms: Framework including UK Adequacy Regulations, International Data Transfer Agreements (IDTA), and UK Addendum to EU SCCs for international data transfers
Financial Services and Markets Act 2000: Sector-specific legislation containing additional requirements for data processing in financial services
Health and Social Care Act 2012: Legislation containing specific provisions for processing health-related data and maintaining patient confidentiality
