Negotiation of Privacy Rules