State six principles of the data protection act 2018 July 8, 2019 16 32 64 128 Data protection act 2018 uk Nist sp 800-53 rev 5