Data Protection Act 2018

The Data Protection Act 2018 (c 29) is a law passed by the British government in 2018, and replaces the one passed in 1998. 
It sets out rules for people who use or store data about living people and gives rights to those people whose data has been collected. The law applies to data held on computers or any sort of storage system, even paper records. 
The law covers personal data which are facts like your address, telephone number, e-mail address, job history etc. 
People who use the information are called "data controllers". People who the data is about are called "data subjects".
Main points of the Data Protection Act.
This is a brief simplified summary of the main principles of the UK Data Protection Act.
This applies to information kept on staff, customers and account holders, for example;