Draft a data privacy policy compliant with global laws