How to comply with privacy laws such as GDPR and CCPA?