All organisations hold personal data, from businesses with data about employees to schools with pupil records. Under the Data Protection Act, organisations must keep data up-to-date, only for as long as they need it, and they must keep it securely. The fact that it is illegal to keep data for longer than it is required brings an immediate need for secure disposal. For more detailed information on the Data Protection Act visit the the Information Commissioner's Office website: http://www.ico.gov.uk.