The Data Protection Act 1998 came fully into force on 24 October. Structured manual filing systems in existence before 24 October 1998 will now need to comply with the Data Protection Directive (95/46/EC).

Follow this link to read more  http://www.opsi.gov.uk/acts/acts1998/19980029.htm