U.K., Data Protection Act, sec.10, 14