AI-first enterprises must treat data privacy as architecture, not an afterthought