2007 security audit data protection newsletter 2009 disaster recovery 2010 data recovery data protection journal 2005 data protection 2006 data protection act 1998 data protection guidance backup data protection legislation data protection law