identity theft data protection law data protection newsletter id theft identity identity theft prevention security information security fraud security audit identity theft protection data protection journal data protection network data protection guidance data protection act 1998