Implement private data filtering function

This actually depends upon #10.

Ping: @kaitlin @afeld