UK GDPR: The United Kingdom General Data Protection Regulation - the primary data protection legislation in the UK post-Brexit, setting out the key principles, rights and obligations for processing personal data in the UK
DPA 2018: The Data Protection Act 2018 - the UK's implementation of data protection legislation that works alongside and supplements the UK GDPR
PECR 2003: Privacy and Electronic Communications Regulations - specific rules governing electronic communications, including marketing, cookies, and communication services
NIS Regulations 2018: Network and Information Systems Regulations - legislation focusing on cybersecurity requirements for essential services and digital service providers
EU GDPR: European Union General Data Protection Regulation - relevant for data transfers between UK and EU, and compliance requirements when handling EU residents' data
Standard Contractual Clauses: Legal templates approved by the UK and EU for ensuring adequate protection in international data transfers
Adequacy Decisions: Formal decisions determining whether a country outside the UK/EU has an adequate level of data protection for international data transfers
ICO Guidelines: Official guidance and codes of practice issued by the Information Commissioner's Office, the UK's data protection authority
EDPB Guidelines: European Data Protection Board guidelines providing interpretation and practical guidance on EU data protection law, relevant for UK organizations dealing with EU data
Sector-Specific Regulations: Industry-specific data protection requirements that may apply depending on the business sector (e.g., healthcare, financial services)
Professional Standards: Relevant professional codes of conduct and industry standards relating to data protection and privacy
