Beyond individual-centric privacy