# GDPR Pack — Source Citations

## Primary Legislation

| Source | URL | Rules |
|--------|-----|-------|
| Regulation (EU) 2016/679 (GDPR) | https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679 | GDPR-001 through GDPR-020 |
| ePrivacy Directive 2002/58/EC | https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32002L0058 | GDPR-010 |

## Case Law

| Case | Reference | Rules |
|------|-----------|-------|
| Planet49 (cookie consent) | CJEU C-673/17 | GDPR-010 |

## Regulatory Guidance

| Authority | Document | URL |
|-----------|----------|-----|
| EDPB | Guidelines on consent | https://edpb.europa.eu/our-work-tools/general-guidance/guidelines-recommendations-best-practices_en |
| ICO (UK) | Lawful basis guidance | https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/ |

All rules last verified: 2026-01-15
