Public concern about the increasing amounts of personal information held by all types of organisation, including government, led to the introduction of the Data Protection Act (DPA) in 1998. All parts of Government should be aware of the need for strict compliance with the Act at all times, and the potentially severe reputational impacts of any breaches of the Act. A breach by the Contractor of the DPA could also have significant repercussions for the Authority. As a result, PFI/PPP contracts typically include provisions that reinforce the Contractor's obligations to comply with the DPA and address the scenario where a breach by the Contractor causes a claim against the Authority.