The Right of Access as a Tool for Privacy Governance