Implement toString() for privacy criteria