controversial privacy policy update