Recommendations for a privacy impact assessment framework for the European Union · Study