Compliance rules usher in new era for personal data privacy policy