DATA PRIVACY DUE DILIGENCE: COMPLIANCE AND RISK IN THE DIGITAL AGE