firm data protection newsletter data protection guidance attorney data protection act 1998 security audit lawsuit mesothelioma data protection lawyer data protection journal data protection legislation data protection law