Statutory instruments made under the Privacy and Personal Information Protection Act 1998