UK GDPR: Post-Brexit version of the EU GDPR that sets fundamental principles for personal data processing, requires lawful basis for processing personal data, and establishes requirements for valid consent
PECR: Privacy and Electronic Communications Regulations 2003 which specifically regulates cookies and similar technologies, implements the EU ePrivacy Directive in UK law, requires clear and comprehensive information about cookies, and mandates explicit consent for non-essential cookies
Data Protection Act 2018: The UK's implementation of data protection principles that complements the UK GDPR and contains specific provisions about data processing
ICO Guidelines: While not legislation, these are authoritative guidelines from the Information Commissioner's Office that provide practical interpretation of the laws and offer specific guidance on cookie consent requirements
Cookie Information Requirements: Key requirements including clear and transparent information about cookies used, purpose of each cookie category, duration of cookies, third-party cookies disclosure, method to withdraw consent, distinction between essential and non-essential cookies, and clear opt-in/opt-out mechanisms
