Privacy promises that can be kept: a policy analysis method with application to the HIPAA privacy rule. - Omar Chowdhury; Andreas Gampe; Jianwei Niu 001; Jeffery von Ronne; Jared Bennatt; Anupam Datta; Limin Jia 001; William H. Winsborough (SACMAT, 2013)