The Data Protection Act 1998 (the “DPA”), which implements the European Data Protection Directive 95/46 EC (the “Directive”), came into force on 1 March 2000. The DPA allowed for two periods of transition, the first of which ended on 24 October 2001. The second transitional period ends on 23 October 2007, but only applies in limited circumstances to eligible manual data held immediately before 24 October 1998. Most businesses which are Processing data in the UK will now need to comply with the provisions of the DPA. The DPA replaces the Data Protection Act 1984 (the “1984 Act”). Though the basic principles of the 1984 Act remain in place, the new data protection regime established by the DPA is much wider in scope and application.