Who needs to know? Private-by-design collaboration