What are the key data privacy laws and regulations?
Last review date: 20 January 2026
- UK General Data Protection Regulation ("UK GDPR"), being the EU General Data Protection Regulation ("EU GDPR") as it forms part of the law of the UK and as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019
- UK Data Protection Act 2018 (DPA 2018)
- Privacy and Electronic Communications Regulations 2003 ("PECR")
- Data (Use and Access) Act 2025 (DUAA), which amends the UK GDPR, DPA 2018, and PECR
What are the key cybersecurity laws and regulations?
Last review date: 20 January 2026
- Network and Information Security Regulations 2018 (SI 2018/506)
- Product Security and Telecommunications Infrastructure Act 2022
- Communications Act 2003
- Computer Misuse Act 1990, which includes cybersecurity related criminal offences
- Financial Conduct Authority Handbook and Prudential Regulation Authority Rulebook