Becoming US privacy compliant