UK GDPR: The UK General Data Protection Regulation - the primary data protection legislation in the UK post-Brexit, setting out the key principles, rights and obligations for processing personal data
Data Protection Act 2018: The UK's implementation of data protection legislation that works alongside and supplements the UK GDPR, providing additional local requirements and exemptions
PECR: Privacy and Electronic Communications Regulations - specific rules for electronic communications, including electronic marketing, cookies and privacy in telecommunications
NIS Regulations 2018: Network and Information Systems Regulations - focusing on cybersecurity requirements for essential services and digital service providers
Common Law Duty of Confidentiality: Legal principle requiring information shared in confidence to be protected and only disclosed with permission or legal requirement
EU GDPR: European Union General Data Protection Regulation - relevant for cross-border data transfers between UK and EU, and when dealing with EU data subjects
UK IDTA: UK International Data Transfer Agreement - mechanism for ensuring adequate protection when transferring personal data outside the UK
Standard Contractual Clauses: Standard contractual terms approved by regulatory authorities for international data transfers
ICO Guidance: Official guidance from the Information Commissioner's Office, the UK's data protection regulator, providing practical interpretation of data protection requirements
EDPB Guidelines: European Data Protection Board guidelines providing interpretation and consistency in application of data protection rules, relevant for UK-EU relationships
