Operational Strategies for compliance with the new privacy legislation