Operationalizing Expectations and Mapping Challenges of Information Privacy and Data Protection Measures