What is an annual privacy audit? What it reviews, how to run it without disrupting operations, common gaps it reveals and how to act on the findings.