How to address data privacy risks created by remote and hybrid work