data protection legislation identity theft data protection newsletter fraud identity theft prevention data protection act 1998 security audit identity theft protection id theft data protection identity data protection journal data protection guidance data protection law