Ian thanks for the response.. Under the new First Principle of the 1998 Act, you have to be "fair" to the data subject, rather than the person giving/selling/renting you the data. If the person on the list you "acquired" did not give specific consent to the list originator to pass their details to you for mailing purposes, you must inform the data subject of your identity as a new data controller processing their data. I thought that might be the case, but just how practical would this be to implement?! and how likely is it that the 'fair processing rule' will be applied. I fear as a data subject that I will not be contacted by the recipient of the list. %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%