Improved capability to evidence and defend privacy compliance