What role does IT play in privacy protection?