Data Protection Act
This act is in place to prevent companies not using your data properly. there are 8 principles and you must know at least FOUR of them and be ablt to comment on these. For example
Data must be kept secure
Data must be accurate and up to date
Data must not be transferred outside the EU
Data must be obtained fairly & lawfully