If you are interested in contract negotiation best practices, check out my discussion in the latest installment of NCURA YouTube Tuesday (National Council of University Research Administrators). Not exactly concerned with privacy per se, but I would consider the topic to be within the larger universe of privacy issues.