Data Protection Act 2018: Primary UK legislation that governs the processing of personal data, including credit information, implementing and supplementing the UK GDPR
UK GDPR: Post-Brexit version of the EU GDPR, providing fundamental rights for individuals regarding their personal data, including rights to rectification, erasure, objection, and access
Consumer Credit Act 1974: Regulates consumer credit agreements and provides consumer protection in credit transactions
Financial Services and Markets Act 2000: Establishes the regulatory framework for financial services in the UK, including the FCA's role in regulating credit reference agencies
FCA Regulatory Framework: Regulatory oversight by the Financial Conduct Authority for credit reference agencies' operations and compliance
ICO Guidelines: Information Commissioner's Office guidelines specifically relating to credit information handling and disputes
GDPR Article 16 Right: Right to rectification - allows individuals to request correction of inaccurate personal data
GDPR Article 17 Right: Right to erasure ('right to be forgotten') - allows individuals to request deletion of personal data under certain circumstances
GDPR Article 21 Right: Right to object to processing - allows individuals to object to certain types of processing of their personal data
GDPR Article 15 Right: Right to access personal data - allows individuals to obtain confirmation if their data is being processed and access to that data
CRAIN Principles: Credit Reference Agencies Information Notice - standardized information about how credit reference agencies use and share personal data
Statutory Response Timeline: Credit reference agencies must respond to disputes within 28 days as per regulatory requirements
Credit Information Retention Period: Standard retention period of 6 years for most credit information on individual credit files
