2000 2004 security audit software data protection legislation 2006 disaster recovery data protection data protection act 1998 data protection journal 2005 data protection newsletter 2002 data protection guidance data recovery backup iso 9001 data protection law