data privacy regulation impact