UK GDPR: Primary legislation governing data protection in the UK post-Brexit, setting out fundamental principles for data processing, legal bases, and data subject rights

Data Protection Act 2018: UK's implementation of data protection standards, complementing and supplementing the UK GDPR with specific national requirements

PECR 2003: Privacy and Electronic Communications Regulations governing electronic communications, including rules about marketing, cookies, and communication privacy

ICO Guidelines: Regulatory guidance from the Information Commissioner's Office, providing practical interpretation and compliance requirements for UK data protection laws

EDPB Guidelines: European Data Protection Board guidance which, while not binding post-Brexit, remains influential for UK data protection practices

Data Protection Principles: Seven key principles under UK GDPR Article 5: lawfulness/fairness/transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity/confidentiality, and accountability

Legal Basis Requirements: Article 6 UK GDPR requirements for lawful processing, including specific conditions for valid consent and right to withdraw

Special Category Data: Additional safeguards under Article 9 UK GDPR for processing sensitive personal data such as health, racial, or religious information

Data Subject Rights: Fundamental rights granted to individuals including access, rectification, erasure, restriction, portability, and objection to processing