Flattening the data privacy learning curve