Data protection law sets out what should be done to make sure everyone’s data is used properly and fairly. You probably have personal data about your customers and clients such as names, addresses, contact details. You might even have sensitive information such as medical data.