Audited privacy protection