A privacy regulation for lending applications