Yes, the DPA law regarding paper based documents comes into force in October. I was under the impression that all paper documents were included, but I heard elsewhere that this was not the case. So I wrote to the Data Protection Office for their advice and this is what they said:(posted 8352 days ago)"The Data Protection Act 1998 as of the 24th October 2001 extends to cover the processing of manual data. Organisations that process only manual personal data may still not be required to Notify the Commissioner of their processing, they will however, have to comply with the data protection principles and comply with the legal obligations that the Act places on them in relation to the processing of personal data.
Information on the transitional provisions that delayed the implementation of the Act in relation to manual data can be found on our website at www.dataprotection.gov.uk via the guidance section, in legal guidance in an introduction to the Act in chapter 6.
When considering what information an organisation must provide in relation to a subject access request they have to take into account the rights of third parties whose personal data may be contained in the records they hold on you. These third party rights are explained in a guidance note that can be found in the compliance section of our website under the title subject access, third party rights."