
Sound and fury, signifying bugger all of any import, as per.
"But compliance with the code will not be mandatory, where it goes beyond the requirement of the Data Protection Act."
You'd have a hard job convincing some companies I can think of that that compliance with the DPA is mandatory where it goes beyond what they can be arsed with.