Data protection The Data Protection Act 2018 controls how your personal information is used by organisations.