British Data Protection & Security Standards
If your business requires you to store personal data, such as details of customers or employees, then you must comply with the Data Protection Act 1998.
The purpose of data protection legislation is to ensure that personal data is not processed without the knowledge and, except in certain cases, the consent of the data subject. It is meant to ensure that personal data is accurately processed, and to enforce a set of security standards for the processing of the information.
As such it is becoming an increasingly important piece of legislation, affecting the day-to-day operation of almost all organisations.