On Parametric Obligation Policies: Enabling Privacy-Aware Information Lifecycle Management in Enterprises