Privacy Regulations in United Kingdom
2 privacy and data protection regulations that apply in United Kingdom
Europe2
PECR is the UK's cookie-specific law, requiring consent before storing or accessing information on a visitor's device unless an exception applies. The Data (Use and Access) Act 2025 raised the maximum penalty from GBP 500,000 to GBP 17.5 million or 4% of global turnover and, from 5 February 2026, added exceptions for low-risk uses such as analytics that only improve your own site, which visitors must be able to refuse.
The UK GDPR is the retained EU GDPR post-Brexit, with consent standards identical to the EU version. The UK adequacy decision was renewed December 2025, valid until December 2031. Combined with PECR, it forms the legal framework for cookie consent in the UK.