Can the Data Protection Act be used to prevent public interest investigations?