The law concerning data protection and privacy which require organisations to gain consent for keeping information about individuals, keep that information safe and only to use it in authorised ways.