Effective oversight with respect for privacy