Ensuring ethical oversight with privacy in mind