2008 security audit data protection newsletter 2006 disaster recovery 2004 data recovery data protection journal 2009 data protection 2005 data protection act 1998 data protection guidance backup data protection legislation data protection law