Protecting Individuals in the Private Regulation of Digital Technologies