You must follow rules on data protection if your business stores or uses personal information.

This applies to information kept on staff, customers and account holders, for example when you:

  • recruit staff
  • manage staff records
  • market your products or services
  • use CCTV

This could include:

  • keeping customers’ addresses on file
  • recording staff working hours
  • giving delivery information to a delivery company