A Three Layered Model To Implement Data Privacy Policies