The 1998 Data Protection Act provides a framework for the way in which organisations should collect and process personal information. It has far-reaching implications for library and information managers who hold personal data on computer or on pa...