University of Hertfordshire avoids data breach action by UK watchdog