76. Transitional

76.—

1. A data controller shall take all necessary measures to ensure its full compliance with the provisions of this Act, and, in particular, the data protection standards, on or before the expiration of a period of two years from the earliest day appointed under section 1(1).

2. No proceedings under this Act may be taken against a data controller in respect of any processing, of personal data, done in good faith during the period referred to in subsection (1).

3. Personal data that is recorded information held other than by means which enable the data to be processed automatically, or to be structured either by reference to individuals or criteria relating to individuals so that specific information relating to a particular individual is readily available, are, until the earliest day appointed under section 1(1), exempt from—

(a) the first, second, third, fifth, seventh and eighth data protection standards;

(b) the sixth data protection standard, except so far as that standard relates to the rights conferred on data subjects by sections 6 and 13;

(c) sections 10, 11 and 12;

(d) Part III;

(e) section 61 (unlawfully obtaining, etc. personal data); and

(f) section 69 (liability for damage), except so far as it relates to damage caused by a contravention of section 6 (rights of access to personal data) or of the fourth data protection standard, and to any distress which is also suffered by reason of that contravention.