Data privacy compliance policy generation