Under the Data Protection Act 1984, those holding personal data on computer (where the data relates to identifiable individuals) must observe certain principles in how the data is held and in respect of the collection, holding, disclosure, use and granting of access to that data. In particular, they must register with the Data Protection Agency.