The Data Protection Act makes paramount the right of citizens to be informed of privacy practices of organisations or businesses handling their personal information. The right to be informed relates to information collected directly from the data subject as well as information collected about the data subject from a third party. The right to be informed imposed an obligation on organisations to have a privacy policy which provides information to citizens as data subjects of the organisation’s privacy practices. Also the right to be informed imposes on organisations the duty to have a contact person within the organisation to whom enquiries may be directed on the privacy and information management practices within the organisation.