Privacy and data protection: 2012 in review