Personal databases and privacy