Improved governance in privacy compliance