ROI: A method for identifying organizations receiving personal data