How would we implement our privacy policy on our site to be a popup to everyone until they agree to it?

While it won't be a popup (it's an intermediate page), if you make a change to your existing Terms & Privacy Policy in the admin panel, when you save the page, you will see a further page with this on it:

enable that setting, and on any account's next login they will see the updated terms and have to accept them before proceeding.