Data protraction Act:
-The main act that protects the security of the personal information
-Information should be shared on a "need to know basis"
-Information is accurate and kept up to date
-Requires that information is kept secure
Confidentiality policy:
http://www.wishingtreenursery.com/wp...icy-MASTER.pdf
Hope this helps :)