privacy properties