A Seat at the Table: The Risks of Complacent Data Privacy Governance