UK GDPR: The UK General Data Protection Regulation as incorporated into UK law post-Brexit, serving as the primary data protection legislation for personal data processing in the UK
Data Protection Act 2018: The UK's domestic data protection law that supplements the UK GDPR and provides additional data protection requirements specific to the UK context
PECR 2003: Privacy and Electronic Communications Regulations governing electronic communications, cookies, and direct marketing in the UK
EU GDPR: European Union's General Data Protection Regulation, relevant when processing EU residents' data or operating across UK-EU borders
UK Adequacy Decisions: Framework determining which countries are deemed to provide adequate data protection standards for international data transfers from the UK
Standard Contractual Clauses: Legal mechanisms approved by UK authorities for ensuring adequate protection when transferring personal data internationally
Binding Corporate Rules: Internal codes of conduct for multinational companies transferring data between group entities, approved by relevant supervisory authorities
ICO Guidelines: Official guidance and codes of practice issued by the Information Commissioner's Office, the UK's data protection regulator
EDPB Guidelines: European Data Protection Board guidelines that may be relevant for UK-EU data processing activities and best practices
FCA Requirements: Financial Conduct Authority's specific data protection requirements for financial services sector
NHS Data Protection: Specific data protection requirements and guidelines for handling healthcare data within the NHS framework
