Methodology for balancing privacy and security : the increasing role of impact assessments in the EU : benefits and risks