2011 privacy settlement