comprehensive privacy legislation