Pursuant to Directive 95/46/EC Member States are required to provide that the transfer of personal data to a third country may take place only if the third country in question ensures an adequate level of protection and if the Member States' laws implementing other provisions of the Directive are complied with prior to the transfer.
Other laws which impact or are likely to impact upon data protection include the Human Rights Act 2001, which was passed by Parliament on 16th January 2001 and is not yet fully in force and the Access to Health Records and Reports Act 1993.