About a year ago, Cap Gemini produced an audit manual for compliance with the provisions of Data Protection Directive 95/46/EC. The document takes the form of 36 key controls and procedures to implement such controls; it is meant for use by the Commission with respect to IDA projects which transfer personal data across administrations. It might help you with compliance with the 1998 Act, since that Act is the implementation of the Directive. > The URL is http://www.ispo.cec.be/ida/text/english/techlib.htm. > Then look under: Legal and Security aspects *"IDA Programme - A Guide to Data Protection Compliance" Study Final Report - March 1998. Chris Data Protection News, Cap Gemini UK plc, 95 Wandsworth Road, London SW8 2HG Tel: +44 (0) 171-917 4362/4704 Fax: +44 (0) 171-917-4666 E-mail: <[log in to unmask]> or <[log in to unmask]> %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%