Business told 'don't panic' over Data Protection Act

The UK data protection registrar, Elizabeth France, has begged companies to stop panicking about Europe's new data protection laws.

Speaking at a CBI conference in London, she described scenes of widespread chaos in the build-up to the new Act when it came into effect on 24 October. "We were bombarded by motorbike couriers delivering new application forms from businesses who thought they had to reregister under the new Act. Many people wouldn't leave until they had cancelled a perfectly valid registration and forced their £75 fees on us," she said.

France conceded that false information has been widespread, but took the opportunity to plead with businesses not to repeat the panic. "Please don't let it happen again," she told a humble audience of lawyers and data managers representing the UK's leading banks, travel services, manufacturers and utilities. "Soon we will be announcing fee increases, but that doesn't mean you have to do anything - we'll contact you if we need to."

France said many businesses are under the impression they have to re-register in order to benefit from a three-year grace period, before complying with the new law.

An assistant registrar, Phil Jones, clarified the situation. "Companies do have to notify under the new Act when their existing licence runs out. But no one has to actually comply with the new act until 24 October 2001, unless they start processing personal data for a new purpose." Jones said that only in that one circumstance would businesses need to contact the registrar themselves.

The 1998 Data Protection Act, which promises tighter controls on personal data, is currently awaiting secondary legislation, which is due to be completed by next summer.