Preparing to Face Expanding Data Privacy Regulation to Prevent Rampant Penalties and Costly Reputational Crisis