privilege log requirements