NB In May 2018 the Data Protection Act 1998 was repealed and replaced with a new Data Protection Act 2018, which sits alongside the GDPR. We have withdrawn this guidance note until we are able to update it to reflect those changes.