2000 security audit software data protection legislation 2002 2005 data protection act 1998 iso 9001 data protection newsletter 2004 data protection 2006 data protection journal data protection guidance data protection law