privacy violation audit checklist