UK GDPR: Primary legislation governing data protection in the UK post-Brexit, setting out fundamental principles for data processing, rights of data subjects, and obligations of data controllers
Data Protection Act 2018: UK's implementation of data protection laws, complementing and supplementing the UK GDPR with national specifications and requirements
PECR: Privacy and Electronic Communications Regulations governing electronic communications, cookies, and direct marketing
ICO Controllers and Processors Guidelines: Official guidance from the Information Commissioner's Office on the roles, responsibilities and relationships between controllers and processors
ICO Joint Controllers Guidelines: Specific guidance from the ICO on implementing joint controller arrangements and responsibilities
Retained ECJ Case Law: Relevant European Court of Justice decisions that were retained in UK law post-Brexit and continue to influence data protection interpretation
EDPB Guidelines: European Data Protection Board guidelines which, while non-binding post-Brexit, remain influential in UK data protection practice
UK GDPR Article 26: Specific article defining requirements for arrangements between joint controllers, including transparency and responsibility allocation
UK GDPR Article 28: Details processor obligations and required contractual terms between controllers and processors
UK GDPR Article 32: Specifies security requirements for data processing, including technical and organizational measures
UK GDPR Articles 13-14: Transparency requirements and information that must be provided to data subjects
UK GDPR Articles 15-22: Data subject rights including access, rectification, erasure, and portability
UK GDPR Articles 44-50: Requirements for international data transfers outside the UK
Industry Regulations: Sector-specific regulations that may impose additional data protection requirements
Contract Law Principles: Common law principles governing contract formation and enforcement in England and Wales
