Privacy contracts incorporated in a privacy protection framework