5.1.8 Data protection laws
The Data Protection Act 2000, which primarily implements the EU data-protection guidelines, regulates all rights and obligations of operators of information collections and applies both to public-legal (authorities etc.) as well as to private legal information collections (such as for companies, associations and other organisations etc.), including those held by cultural institutions. Fundamentally, according to Paragraph 47, the transfer of addresses requires the agreement of those affected, although there are exceptions (for statistical or scientific reasons, for example).