Relevant Legislation

In the UK this is the GDPR (General Data Protection Regulations ((EU) 2016/679)) and the Data Protection Act 2018. 

Other laws/legislation apply in other territories, such as the CCPA in California.