Improvements to privacy by design

[henryhaverinen]

• make appendix collapsible
• make the table of personal information come from the threat model and asset register
• each asset type must have two fields: whether there is personal information, and a description of personal information