UK GDPR: The United Kingdom General Data Protection Regulation - the primary legislation governing data protection in the UK post-Brexit, setting out the key principles, rights and obligations for processing personal data

Data Protection Act 2018: The UK's implementation of data protection legislation that works alongside the UK GDPR, providing specific data protection requirements and exemptions within UK law

PECR 2003: Privacy and Electronic Communications Regulations - specific rules for electronic communications, including rules about marketing, cookies and privacy in electronic communications

Human Rights Act 1998: Legislation incorporating the European Convention on Human Rights into UK law, particularly Article 8 concerning the right to privacy and family life

Common Law Duty of Confidentiality: Legal principle requiring that information shared in confidence must be kept confidential unless there is a legal basis or explicit permission for disclosure

Freedom of Information Act 2000: Legislation providing public access to information held by public authorities, which must be balanced against data protection requirements

ICO DPIA Guidance: Official guidance from the Information Commissioner's Office on conducting Data Protection Impact Assessments, including when they are required and how to conduct them

EDPB Guidelines: European Data Protection Board guidelines which, while not binding post-Brexit, remain influential in UK data protection practice

Financial Services and Markets Act 2000: Sector-specific legislation containing additional data protection requirements for financial services organizations

Health and Social Care Act 2012: Sector-specific legislation containing additional data protection requirements for healthcare organizations

Children's Code: Age Appropriate Design Code setting out standards for online services likely to be accessed by children

International Data Transfer Mechanisms: Requirements and mechanisms for lawfully transferring personal data internationally, including adequacy decisions and appropriate safeguards

EU GDPR: European Union General Data Protection Regulation which may still apply to UK organizations processing EU residents' data or operating in the EU market