UK GDPR and Data Protection Act 2018: Core data protection legislation in the UK that governs the processing of personal data, including research data. Sets out principles for data processing, rights of data subjects, and obligations of data controllers/processors.
Privacy and Electronic Communications Regulations (PECR): Specific rules for privacy of electronic communications, which may be relevant if research involves electronic data collection or communication methods.
Clinical Trials Regulations: Specific regulations governing clinical trials and medical research, including requirements for data handling and participant protection in medical studies.
Human Tissue Act 2004: Legislation governing the storage, use, and transfer of human tissue samples and associated data in research contexts.
Mental Capacity Act 2005: Legal framework for research involving participants who may lack capacity to consent, including safeguards and requirements for such research.
Copyright, Designs and Patents Act 1988: Primary legislation governing intellectual property rights, relevant for protecting and sharing research outputs and data.
Trade Secrets Regulations 2018: Regulations protecting confidential business information and know-how, which may be relevant to commercially sensitive research data.
Freedom of Information Act 2000: Legislation governing public access to information held by public authorities, which may affect research data sharing by public institutions.
Common Law Duty of Confidentiality: Legal principle requiring maintenance of confidentiality in professional relationships, including research contexts.
NHS Research Governance: Specific requirements and frameworks for conducting and sharing research within or involving the National Health Service.
International Data Transfer Requirements: Rules and mechanisms for transferring research data internationally, including adequacy decisions and Standard Contractual Clauses under UK GDPR.
Information Security Standards: Technical and organizational standards (such as ISO 27001) for ensuring secure handling and transfer of research data.
