Isn't the problem the "labelling" of "privacy-sensitive" in the first place?