Best data privacy practices for the legal industry