Compliance, consent, and data privacy