Understanding compliance privacy and data protection