data protection privacy backup subject access data protection legislation data protection journal security audit data recovery data protection audit data protection newsletter data transfer outside eu data protection act 1998 data protection law disaster recovery personal data