Peter Bodorik Dawn N. Jutla Mike Xuehai Wang Consistent privacy preferences (CPP): model, semantics, and properties. 2368-2375 2008 SAC http://doi.acm.org/10.1145/1363686.1364250 conf/sac/2008 db/conf/sac/sac2008.html#BodorikJW08