privacy law 196-2003