Guide to privacy regulatory action