privacy legislation debate