Balancing disclosure and protection