British Airways, African Regent Hotel among top names said to have violated Data Protection law 6 years ago