Confidence in the organisation’s soft skills and ability in responding to privacy requests