Towards a privacy measurement criterion for voting systems | Synapse