Do all data controllers have to register with the Information Commissioner's Office ("ICO")?
Can we transfer personal data abroad?
I understand that the DPA prevents companies from taking automated decisions. What is prohibited?
