REgulatory landscape for data privacy