The Data Protection Act 1998 affects all organisations that handle personal data. The act came into force on 1 March 2000 and sets out rules for processing personal data, detailed within eight principles. It replaces the Data Protection Act 1984. It is overseen and enforced by the Information Commissioner, who is additionally responsible for the Freedom of Information Act 2000 and the Environmental Information Regulations 2004. For further information, download the ACCA factsheet from the 'Related documents' section on this page.