This section contains information about the obligations placed on organisations under data protection law.