Privacy impact assessment (Springer, 2012)