The four-part Code of Practice under the Data Protection Act 1998 on employment and data protection in the UK places a further burden of responsibility on employers and their advisers. The Data Protection Act also applies to manual data, not just computer data, and now includes a tough enforcement policy.