How citizens and investigative journalists handle privacy protection