Implementation dates

Many aspects of the Data Protection Act 1998 were introduced in stages from 2000 onwards. The only provisions that have yet to be implemented are those that relate to manual personal data that is held in a "relevant filing system". All manual data in new personnel files that have been set up since 24 October 1998 must comply in full with all of the provisions of the DPA and all of the Data Protection Principles.

However, the following provisions of the DPA will not apply to manual files that existed before 24 October 1998 until 24 October 2007:

• the "lawful" processing provision of Principle 1
• the processing of "sensitive" data provisions of Principle 1
• the lawful purposes provisions of Principle 2
• the adequate, relevant and not excessive provisions of Principle 3
• the accurate and up-to-date provisions of Principle 4
• the retention provisions of Principle 5.