checklist-privacy-2018