Privacy: priority or afterthought?