UK GDPR: The UK General Data Protection Regulation as incorporated into UK law post-Brexit, providing the fundamental framework for data protection in the UK
Data Protection Act 2018: The UK's implementation of data protection laws, working alongside UK GDPR to provide a comprehensive data protection regime
PECR 2003: Privacy and Electronic Communications Regulations governing electronic communications, including cookies and direct marketing
EU GDPR: European Union General Data Protection Regulation, relevant for data transfers between UK and EU, and compliance requirements when dealing with EU data subjects
European Convention on Human Rights: Article 8 specifically provides the right to respect for private and family life, home and correspondence
UK Standard Contractual Clauses: Standard contractual terms approved by the UK government for international data transfers from the UK to third countries
EU Standard Contractual Clauses: EU-approved contractual terms for data transfers to third countries, relevant when EU data is involved
Adequacy Decisions: Official determinations by UK/EU authorities that certain countries provide adequate levels of data protection
Binding Corporate Rules: Internal rules for data transfers within multinational companies, approved by relevant supervisory authorities
ICO Guidance: Official guidelines and recommendations from the Information Commissioner's Office, the UK's data protection authority
EDPB Guidelines: European Data Protection Board guidelines providing interpretations and best practices for data protection compliance
Industry Regulations: Sector-specific data protection requirements that may apply depending on the industry context
International Standards: Technical standards such as ISO 27701 for privacy information management systems
Law Enforcement Provisions: Legal requirements regarding data access and processing for law enforcement and national security purposes
Special Categories Requirements: Additional protections and requirements for processing sensitive personal data such as health, biometric, or religious information
