restaurant compliance legal requirements for food and privacy