The Data Protection Act 1988 regulates the ways in which organisations may gather, store, process and disclose personal information. You are required to:

(a) describe the principles upon which the Act is based;

(b) discuss some of the responsibilities placed on organisations by the Act;

(c) critically evaluate the strengths and weaknesses of the Act in terms of the right given to individuals to view and amend any personal data held on them.