2000 2006 subject access 2005 2004 data protection data protection journal data protection audit data protection law software data protection newsletter 2002 personal data data transfer outside eu data protection act 1998 iso 9001 privacy