data protection law identity theft e-privacy fraud data protection journal identity theft protection id theft identity online data protection identity theft prevention data protection act 1998 data protection act