regulatory pressure on data privacy