identity theft data protection law data protection newsletter id theft identity identity theft prevention disaster recovery backup fraud data protection identity theft protection data protection journal security audit data recovery data protection legislation data protection act 1998