Integrating privacy policies into business processes