‘Vague’ Data Protection Act blights fraud detection, say insurers