A Model Enabling Law Compliant Privacy Protection through the Selection and Evaluation of Appropriate Security Controls. - E. S. Siougle; Vasilios Zorkadis (InfraSec, 2002)