Rearranging the letters of 'the data protection act' (Obtaining, holding, use,disclosure of persons info) gives: