The Data Protection Act 1998 came into force on 1 March 2000. It applies to 'personal
data', that is data about identifiable living individuals. Those who decide how and why personal data
is processed (data controllers), must comply with the rules of good information handling, known as the
data protection principles, and the other requirements of the Data Protection Act.
