privacy and information rights