Data Privacy: Stringent Laws But Poor Execution