ABSTRACT
The application or enquiry form (real or virtual) is often the first point at which a
significant amount of personal information is sought from a prospective customer and
therefore the point at which significant data protection implications for creating and
holding records arise. There are some implications, too, where the organisation carries
out further checks and referrals in respect of the application, for example medical
testing, money laundering checks and credit reference checks.