Transitioning with the Data Protection Act