Your obligations underneath the Act apply through the period when you find yourself processing personal info – as do the legal rights of individuals in respect of that personalized knowledge. So you need to comply with the Act from the moment you acquire the information till enough time when the data is returned, deleted or destroyed.Valeria