This Order brings the Data Protection Act 1998, with the exception of section 56 and those provisions already in force by virtue of section 75(2), into force on 1st March 2000. Section 75(4) of the Act provides that section 56 (prohibition of requirement as to production of certain records) must not be brought into force before sections 112, 113 and 115 of the Police Act 1997 (which provide for the issue by the Secretary of State of criminal conviction certificates, criminal record certificates and enhanced criminal record certificates) are all in force.

The Order makes transitional provision for requests made to credit reference agencies pursuant to section 158 of the Consumer Credit Act 1974.

The provisions of the Data Protection Act 1998 implement Directive 95/46/EC on the protection of individuals with regard to the processing of personal data and on the free movement of such data.