From sharing data they shouldn't to failing to report to keeping data longer than allowed, police departments are violating policy