UK GDPR: The UK General Data Protection Regulation - Primary legislation governing personal data processing and protection in the UK post-Brexit

DPA 2018: Data Protection Act 2018 - The UK's implementation of data protection legislation that works alongside UK GDPR

PECR 2003: Privacy and Electronic Communications Regulations 2003 - Specific rules for electronic communications, marketing, and cookies

ICO Consent Guidance: Information Commissioner's Office guidelines on obtaining valid consent for data processing

EDPB Guidelines: European Data Protection Board guidelines - While not binding post-Brexit, remain influential for UK data protection practices

Freely Given Consent: Consent must be given without coercion, with genuine free choice and ability to refuse without detriment

Specific Consent: Consent must be granular for distinct processing operations and purposes

Informed Consent: Data subjects must be informed about what they're consenting to in clear, plain language

Unambiguous Consent: Clear indication through statement or affirmative action that the individual agrees to data processing

Right to Withdraw: Individual's right to withdraw consent at any time, as easily as it was given

Right to Access: Individual's right to obtain confirmation of data processing and access to their personal data

Right to Rectification: Individual's right to have inaccurate or incomplete personal data corrected

Right to Erasure: Individual's right to have personal data erased (also known as 'right to be forgotten')

Right to Data Portability: Individual's right to receive their personal data in a structured, commonly used format

Right to Object: Individual's right to object to processing of their personal data in certain circumstances