Government consults on compulsory data protection audits for NHS