privacy protection protocol