Under the Data Protection Act 1988 and 2003 the following procedures are followed when any application is received