Business owners are being urged to reappraise their policies for the storage and retrieval of client data ahead of an extension to the Data Protection Act due to come into force next month.

Since March 2000, the Data Protection Act has required companies to produce within 40 days any information stored on a person on their PCs and networks.