Data privacy consultant