identity theft disaster recovery data protection legislation identity id theft security audit data recovery data protection newsletter data protection journal identity theft prevention data protection identity theft protection data protection act 1998 data protection guidance backup fraud data protection law