How the Data Protection Act affects the way firms can process information and monitor their staff

The second version of the UK's Data Protection Act has been in force since 1998 but many firms have yet to review their processes to take account of its tougher rules.

The Information Commission, the body charged with enforcing the act within the UK, has published a series of guides explaining the responsibilities of data controllers. Firms would be wise to ensure that they familiarise themselves with the guidelines, and take steps to implement any necessary changes.