A law under which organisations are responsible for protecting the privacy of the personal data they hold. The current act (Data Protection Act 1998) is the UK’s response to the requirement to implement National legislation in accordance with European Directives.
Generally the Act does not apply to domestic use, however anyone retaining personal data for alternative purposes is legally obliged to comply with the Data Protection Act, subject to some exemptions.