A Risk Management Approach to the Omnibus Privacy Law Changes