The Data Protection Act: a stone to sling at the Facebook Goliath?