firm security audit data protection newsletter mesothelioma disaster recovery lawyer data recovery data protection journal attorney data protection lawsuit data protection act 1998 data protection guidance backup data protection legislation data protection law