The 1998 Data Protection Act has had far-reaching implications for voluntary organizations which hold personal data on computer or on paper. The second edition of this practical guide has been revised and updated following the implementation of the Act to include more examples, model policies and statements, and decision-making flow charts, as well as authoritative answers to key questions, and a comprehensive index. It sets out clearly: what managers need to do in order to comply; who and what the Act applies to; when you need consent from the people whose data you hold; the rights of individuals as data subjects; the responsibilities of voluntary organizations; what managers need to do in order to stay within the law; and how to incorporate Data Protection into your policies and procedures.