AI, ChatGPT and privacy - what in-house legal should know