Data privacy compliance for legal marketing