validation controls in privacy