Auditing Data Privacy and Conducting Privacy Impact Assessments