privacy restrictions