"privacy law" is the key