smart city privacy policy framework