Designing for Privacy and its Legal Framework