is data privacy a law?
At the heart of it are eight common sense rules known as the 'data protection principles' that all organisations collecting and using personal information are legally required to comply with. The law provides stronger protection for more sensitive information such as: Ethnic background. Political opinions.