British Airways, African Regent Hotel among top names said to have violated Data Protection law 7 years ago