navigating data privacy marketing compliance