privacy investigation