Privacy regulation and the role of legal counsel