What is personal data and what are the basic tenets of the Data Protection Act 1998 “DPA” and the General Data Protection Regulations (GDPR)?