HIPAA compliant data governance in automated ad targeting