How Companies Can Boost their Data Privacy Practices