A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements