Secure Provenance-Based Auditing Of Personal Data Use