Privacy compliance rules shaping future IT security processes