P2P transparency under threat after investors flout privacy agreements