UK GDPR: The UK General Data Protection Regulation - the primary legislation governing data protection and privacy in the UK post-Brexit, setting out the key principles, rights and obligations for processing personal data
Data Protection Act 2018: The UK's implementation of data protection laws, working alongside and supplementing the UK GDPR, providing specific data protection requirements and derogations for the UK context
PECR: Privacy and Electronic Communications Regulations 2003 - Specific rules for electronic communications, including rules on cookies, electronic marketing, and privacy in electronic communications
EU GDPR: European Union General Data Protection Regulation - Must be considered when transfers involve EU entities or data subjects, particularly relevant for cross-border data transfers
Standard Contractual Clauses: UK ICO-approved standard contractual clauses that provide appropriate safeguards for international data transfers, particularly important post-Brexit
International Data Transfer Agreements: Formal agreements that provide appropriate safeguards for transferring personal data internationally, including specific requirements and obligations for data protection
ICO Guidelines: Regulatory guidance from the Information Commissioner's Office, providing practical interpretation and implementation advice for data protection requirements in the UK
EDPB Guidelines: European Data Protection Board guidelines that provide additional interpretation and best practices, particularly relevant for matters involving EU-UK data transfers
Schrems II Decision: Legal precedent requiring assessment of third country data protection adequacy and additional safeguards for international data transfers
Third Country Transfer Requirements: Specific requirements and safeguards needed when transferring personal data to countries outside the UK and EU
Data Adequacy Decisions: Official determinations of whether a country provides adequate data protection, affecting the requirements for data transfers to that jurisdiction
Appropriate Safeguards Requirements: Mandatory technical and organizational measures required to ensure adequate protection of personal data during international transfers
Data Subject Rights: Specific rights that must be preserved and protected when transferring personal data, including access, rectification, erasure, and data portability
Security Measures: Technical and organizational security requirements that must be implemented to protect personal data during transfers
Breach Notification Requirements: Obligations to notify relevant supervisory authorities and affected individuals in case of personal data breaches during transfers
