privacy and protection need analysis