CDR: The Market for Privacy