Four challenges for a theory of informational privacy