The Data Protection Act 1998 (for example data protection principle 7 in schedule 1 of the Act, that appropriate technical and organisational measures must be taken to protect all personal data)
Deddf Diogelu Data 1998 (er enghraifft y saith egwyddor diogelu data yn atodlen 1 y Ddeddf, y mae’n rhaid cymryd mesurau sefydliadol a thechnegol priodol i ddiogelu’r holl ddata personol)