Data registrar calls for privacy review