Data protection law basics – 10 things your legal firm should look out for