1. As a responsible Financial Services institution we already have strict rules to safeguard the details of and personal information relating to our customers. These rules have been increased and codified by the Data Protection Act 1998. The Act regulates the processing of personal data, that is to say information relating to living, identifiable individuals within the United Kingdom. The personal data or information process need not be particularly extensive or personal. It may be as little as a name and address.

2. Personal data may be processed in a large number of ways; by computer, manual files, imaging, telephone systems, CCTV and word processing.

Page 1 of 2