privacy guidelines report