An interesting article related to the KIN Webinar on 2nd July on 'The tension between Knowledge Sharing and Protecting IP'. The response from Mike Harvey in the comments is particularly useful and pragmatic.
The new rules generally expand the definition of personal data - so it can include information such as location data, online identifiers (such as IP addresses) and other metadata. So again, this means businesses really need to conduct an audit to identify all the types of personal data they hold. Ignorance is not compliance.
" Set up to promote awareness and understanding of intellectual property law, and its contribution to economic and social welfare, through high quality, independent research, worth a browse..."