The Information Commissioner has published a set of guidelines for organisations collecting personal data.

source