privacy procedure