Comply with data protection legislation
Introduction
The Data Protection Act 1998 governs the use of personal information by businesses and other organisations. If your business requires you to store people's personal details, such as customer or employee records, then you must comply with the Act.
This guide tells you what the law requires and gives advice on how to meet its requirements. It also tells you whether you need to notify the Information Commissioner's Office (ICO) about what you use personal information for and where to go if you need more information.
Subjects covered in this guide
- Introduction
- What does the Data Protection Act 1998 apply to?
- The data protection principles
- Using personal information fairly and lawfully
- Individuals' rights under the Data Protection Act 1998
- Personal information access rights
- Monitoring workers
- Notifying the Information Commissioner's Office about personal information
- The Information Commissioner's Office
- Here's how I complied with the Data Protection Act 1998

ICO Data Protection Helpline
08456 30 60 60

Actions
- Download data compliance advice for small businesses from the ICO website (PDF, 145K) - Opens in a new window
- Use our interactive tool to find out whether you need to notify the Information Commissioner about the data your business holds
- Data protection guidance on the ICO website - Opens in a new window
- Download a Data Protection Act compliance checklist from the ICO website (PDF, 56K) - Opens in a new window
- Data protection scam information on the Office of Fair Trading website - Opens in a new window
- View local and national events linked to this topic



