when did the data protection act (1998) come into force in the uk