Heathrow Airport and Bupa fines re-iterates basic data protection measures businesses should have in place