Data Privacy Guidelines for Large Utilities