privacy guidelines suggest