How the future of data privacy regulation is spurring change