Privacy-engineering activities