Balancing Benefits and Harms: Privacy Protection Policies