Software engineering for privacy in-the-large

   Abstract