What Should a Firm Know? Protecting Consumers' Privacy Rents