The Data Protection Act 1998 is brought fully into force on 24 October 2007, encompassing all manual filing systems in existence before 24 October 1998.

Employers should consider a review of what employee information it is really necessary to retain. There has been recent guidance from the Information Commissioner’s Office as what constitutes ‘personal data’. To view this guidance please visit