The data protection act exists to provide protection for people's personal information and to allow others to use personal information when they need to in accordance with set statutory principles. It was passed in 1998 and came into force in 2000. You can read the text of the Data Protection Act 1998 itself and also the EC Data Protection Directive (95/46/EC) which the Act gives effect to. This section also contains secondary and other relevant legislation.
The following statutory instruments currently in force have been made under the Data Protection Act:
These regulations establish the fees which data controllers and the Information Commissioner may charge under the Act.
This order brought the provisions of the act into force:
These rules apply to appeals made under the Data Protection Act 1998 and the Freedom of Information Act 2000:
The Information Tribunal (formerly known as the Data Protection Tribunal) also hears appeals relating to the Privacy and Electronic Communications (EC Directive) Regulations 2003. Enforcement appeals arising from these regulations are dealt with under the Enforcement Appeals rules above.