U.K., Data Protection Act 1998