Best-practices tool to assess and manage privacy