Health and Safety at Work Act 1974: Primary UK legislation that sets out the general duties employers have towards employees and members of the public for workplace safety and security
Management of Health and Safety at Work Regulations 1999: Regulations that require employers to assess and manage risks to their employees and others arising from work activities
Private Security Industry Act 2001: Legislation governing the private security industry, including licensing requirements and operational standards
UK General Data Protection Regulation (UK GDPR): Post-Brexit data protection legislation that governs how organizations must handle and protect personal data
Data Protection Act 2018: The UK's implementation of data protection laws, working alongside UK GDPR to regulate personal data processing
Counter-Terrorism and Security Act 2015: Legislation addressing terrorist threats and requiring certain organizations to have due regard to preventing people from being drawn into terrorism
Terrorism Act 2000: Core anti-terrorism legislation defining terrorist offenses and providing powers to prevent and investigate terrorism
Official Secrets Act 1989: Law protecting state secrets and official information, particularly relevant for security assessments involving government or sensitive information
Occupiers' Liability Act 1957: Legislation defining the duty of care owed to lawful visitors on premises, relevant for physical security assessments
Employment Rights Act 1996: Key legislation governing employment rights and responsibilities, including aspects of workplace security
Equality Act 2010: Legislation ensuring non-discriminatory practices in security measures and assessments
ISO 27001: International standard for information security management systems, providing framework for security risk assessments
ISO 31000: International standard providing principles and guidelines for effective risk management
BS 7858: British Standard for security screening of individuals employed in a security environment
CPNI Guidelines: Centre for the Protection of National Infrastructure guidance on protecting national security and critical assets
NCSC Guidance: National Cyber Security Centre frameworks and guidance for managing cyber security risks
