If you found my previous post somewhat disconcerting then have a look at this link which is the UK Information Commissioners Guide to the new legislation. " The code explains how the Data Protection Act applies to the collection and use of personal data online. It also provides good practice advice for organisations that do business online and are therefore subject to the DPA."
and if you want more in depth information about the legislation itself then have a look at this video from Stewart Room. It makes it somewhat more accessible.