1998 DATA PROTECTION ACT