future-proofing first-party data against regulatory shifts