Balancing benefits and harms: privacy protection policies