Why we course creators need to comply with applicable privacy laws