Managing data-privacy risk in today’s global environment