The Data Protection Act 1998 requires every data controller (e.g. organisation, sole trader etc.) who is processing personal information to register with the Information Commission Office, unless they are exempt.
It applies to all businesses or individuals who hold personal data, regardless of size. Unless you are an individual who only holds domestic information, such as an address book, you are required to comply with the Act.