Not All Data Is the Same: Understanding Your Data Privacy Obligations in Legal Outsourcing