Political parties are required to create privacy policies for handling voters’ data, but enforcement is up to them, raising concerns about oversight.