New research from recruitment management consultancy Zebra has revealed gaping holes in levels of awareness of the act – which controls how an organisation can gather, store and share personal information – and how it applies to recruitment.

72% of companies surveyed claimed they follow the Employment Practices Data Protection Code – the government’s recommendations for ensuring compliance. But only half of these companies have registered with the Information Commissioner’s Office, which is the first step to ensure compliance.

Zebra’s managing director John O’Sullivan warned: “The vast majority of businesses are falling down when it comes to recruitment and the Data Protection Act.

“They are at risk from litigation and financial loss as a result. Once there have been one or two high profile cases in court, the flood gates will open. It is essential companies act now to prevent exposure in the future.”