Data protection implications

Firms must make sure they comply fully with the Data Protection Act at all times. A customer's data should only be processed with the customer's explicit consent.

Firms will need to take particular care to make sure those customers who may have mental capacity issues understand when they are being asked to give consent to their personal data being captured and processed.

Further information on the provisions of the Data Protection Act - which apply to all customers, not just those who may have mental capacity issues – is set out in the ‘Data protection' module.