SMS: A model-based approach to support privacy compliance