Privacy Impact Assessment Template for Provenance
k-Anonymity: A Model for Protecting Privacy