privacy protection paradox