Reduced cost of implementing privacy rules and controls