Many organisations collect personal data as part of their daily business. Names, addresses, phone numbers, income and credit histories, and bank account details are all collected and stored in a database. Because this information is very sensitive, the UK government enacted the 1998 Data Protection Act (DPA). The Act gives people the right to know what data is held about them and to make changes