This sets out rules for collecting, storing and processing personal data.

Personal data relates to living, identifiable individuals.

The Act first became law in 1984 and was updated in 1988

It describes:

• The rules that data controllers (people who store and process personal data) must follow;
• The rights of data subjects (the individuals that the data is about);
• The exemptions that exist to the Act