Data Protecion Act

Anyone processing personal information must comply with eight enforceable principles of good information handling practice.
Find out more here (link)