When the Data Protection Act 1998 (DPA) came into force in March 2000, a number of transitional arrangements were included in the legislation to allow data controllers time to get their personal information handling practices and records compliant.

The final deadline for transitional arrangements is the 23 October 2007. This final deadline provided relief to to certain manual (non-digitised) records created before 24 October 1998, including those held in structured manual filing systems.

From 24 October the DPA will apply in full to all personal information covered by it and data controllers will need to ensure that the way they process personal information is fully compliant.