The Data Protection Act 1998 defines UK law regarding the processing of data about identifiable living people. It is the main piece of legislation governing the protection of personal data in the UK.
As museums collect information about living people in their documentation systems (paper and electronic) they are classed as ‘data controllers’ and have legal obligations about the way they hold, safeguard and use the data they are collecting. The Information Commissioners Office is the independent authority for upholding information rights.
Clicking the link on this page will open this resource to view on the Legislation.gov.uk website.