regulatory-law-alert-february-2020-2/privacy-policy