UK GDPR: The UK General Data Protection Regulation - Primary legislation governing data protection and privacy in the UK post-Brexit, setting out fundamental principles for personal data processing

Data Protection Act 2018: The UK's implementation of data protection laws, complementing and working alongside UK GDPR, providing specific data protection requirements and derogations

PECR 2003: Privacy and Electronic Communications Regulations - Specific rules for electronic communications, including rules on cookies, electronic marketing, and privacy in electronic services

Human Rights Act 1998: Incorporates European Convention rights into UK law, particularly Article 8 which establishes the right to respect for private and family life

Common Law Duty of Confidentiality: Legal principle requiring information shared in confidence to be kept confidential, derived from case law and common law traditions

Consumer Rights Act 2015: Relevant when dealing with consumers, ensuring fairness and transparency in consumer contracts and privacy notices

ICO Guidance: Regulatory guidelines from the Information Commissioner's Office providing practical interpretation and compliance advice for data protection legislation

EDPB Guidelines: European Data Protection Board guidelines which remain relevant post-Brexit as good practice standards for data protection compliance