Navigating Gatekeeping Practices for Privacy Without Compromising Data Protection