cybersecurity privacy rule cost