clarifying what could be private data