Data Protection Act 2018: Primary UK legislation that governs the processing of personal data and implements the UK GDPR requirements
UK GDPR: Post-Brexit version of the EU GDPR, setting out key requirements for data protection and privacy in the UK
Computer Misuse Act 1990: Legislation criminalizing unauthorized access to computer systems and data manipulation
PECR 2003: Privacy and Electronic Communications Regulations governing electronic communications, cookies, and marketing
Freedom of Information Act 2000: Legislation providing public access to information held by public authorities
NIS Regulations 2018: Network and Information Systems Regulations ensuring security of essential services and digital providers
FCA Requirements: Financial Conduct Authority regulations for security and risk management in financial services
NHS Digital Security Standards: Healthcare-specific security requirements for NHS and related organizations
ISO 27001: International standard for information security management systems
ISO 19011: International guidelines for auditing management systems
NIST Cybersecurity Framework: US-based framework for improving critical infrastructure cybersecurity, widely adopted globally
Employment Rights Act 1996: Main piece of UK employment legislation affecting workplace monitoring and security practices
Human Rights Act 1998: Legislation protecting fundamental rights including privacy in the workplace
RIPA 2000: Regulation of Investigatory Powers Act governing surveillance and investigation of communications
PCI DSS: Payment Card Industry Data Security Standard for organizations handling credit card data
SOX Compliance: Sarbanes-Oxley Act requirements for US-listed companies, affecting IT controls and security
HIPAA: US Healthcare Insurance Portability and Accountability Act, relevant for handling US healthcare data
ICO Guidance: Information Commissioner's Office guidelines on data protection and security practices
NCSC Guidelines: National Cyber Security Centre's best practices and security recommendations
ISACA Standards: Professional standards for IT governance, security auditing and control
