<P> The 1998 Act replaced the Data Protection Act 1984 and the Access to Personal Files Act 1987 and implemented the EU Data Protection Directive 1995 . </P> <P> The Privacy and Electronic Communications (EC Directive) Regulations 2003 altered the consent requirement for most electronic marketing to "positive consent" such as an opt in box . Exemptions remain for the marketing of "similar products and services" to existing customers and enquirers, which can still be given permission on an opt out basis . </P> <P> The Jersey data protection law was modelled on the UK law . </P> <P> Section 1 defines "personal data" as any data that can be used to identify a living individual . Anonymised or aggregated data is less regulated by the Act, providing the anonymisation or aggregation has not been done in a reversible way . Individuals can be identified by various means including their name and address, telephone number or email address . The Act applies only to data which is held, or intended to be held, on computers (' equipment operating automatically in response to instructions given for that purpose'), or held in a' relevant filing system' . </P>

Who is responsible for administration of data protection act 1998