Data Protection requires that personal data held about an individual is maintained and processed in accordance with the EU legal requirements. This protection is not something which affects just large companies, but is also the responsibility of every organisation that holds personal records to comply. Any business not fully compliant by 24 October 2001 will leave itself open to prosecution under the Act.

This Best Practice guide is published via the NCC Legal Knowledge Network.