How have you handled data security and privacy compliance such as HIPAA or GDPR in your past software development projects?