CDR: Paying for privacy