Where is the debate on data privacy headed?