The primary laws governing data protection in the UK are:
The UK General Data Protection Regulation (UK GDPR)
The Data Protection Act 2018 These laws set out the rights of individuals and the obligations of organisations handling personal data.