Embedding privacy requirements in campaign development