{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,10]],"date-time":"2026-05-10T07:27:38Z","timestamp":1778398058170,"version":"3.51.4"},"publisher-location":"Cham","reference-count":34,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030337513","type":"print"},{"value":"9783030337520","type":"electronic"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-33752-0_3","type":"book-chapter","created":{"date-parts":[[2019,10,25]],"date-time":"2019-10-25T17:01:49Z","timestamp":1572022909000},"page":"39-53","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":18,"title":["Position: GDPR Compliance by Construction"],"prefix":"10.1007","author":[{"given":"Malte","family":"Schwarzkopf","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Eddie","family":"Kohler","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"M.","family":"Frans Kaashoek","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Robert","family":"Morris","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,10,23]]},"reference":[{"key":"3_CR1","unstructured":"California Legislature. The California Consumer Privacy Act of 2018, June 2018. \n                      https:\/\/leginfo.legislature.ca.gov\/faces\/billTextClient.xhtml?bill_id=201720180AB375"},{"key":"3_CR2","unstructured":"Chajed, T., et al.: Amber: decoupling user data from web applications. In: Proceedings of the 15th Workshop on Hot Topics in Operating Systems (HotOS). Kartause Ittingen, Switzerland, May 2015"},{"key":"3_CR3","unstructured":"Chajed, T., Gjengset, J., Frans Kaashoek, M., Mickens, J., Morris, R., Zeldovich, N.: Oort: user-centric cloud storage with global queries. Technical report MIT-CSAIL-TR-2016-015. MIT Computer Science and Artificial Intelligence Laboratory, December 2016. \n                      https:\/\/dspace.mit.edu\/bitstream\/handle\/1721.1\/105802\/MIT-CSAIL-TR-2016-015.pdf?sequence=1"},{"key":"3_CR4","unstructured":"Chandra, R., Gupta, P., Zeldovich, N.: Separating web applications from user data storage with BSTORE. In: Proceedings of the 2010 USENIX Conference on Web Application Development (WebApps), Boston, Massachusetts, USA, p. 1 (2010). \n                      http:\/\/dl.acm.org\/citation.cfm?id=1863166.1863167"},{"key":"3_CR5","doi-asserted-by":"crossref","unstructured":"Chandra, R., Kim, T., Shah, M., Narula, N., Zeldovich, N.: Intrusion recovery for database-backed web applications. In: Proceedings of the 23rd ACM Symposium on Operating Systems Principles (SOSP), Cascais, Portugal, October 2011","DOI":"10.1145\/2043556.2043567"},{"key":"3_CR6","unstructured":"Chen, H., Kim, T., Wang, X., Zeldovich, N., Kaashoek, M.F.: Identifying information disclosure in web applications with retroactive auditing. In: Proceedings of the 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI), Broomfield, Colorado, USA, October 2014"},{"key":"3_CR7","unstructured":"Chlipala, A.: Static checking of dynamically-varying security policies in database-backed applications. In: Proceedings of the 9th USENIX Symposium on Operating Systems Design and Implementation (OSDI), Vancouver, British Columbia, Canada, October 2010. \n                      http:\/\/adam.chlipala.net\/papers\/UrFlowOSDI10\/"},{"key":"3_CR8","unstructured":"Cresse, P.: The GDPR: Where Do You Begin? CloverDX Blog, August 2017. \n                      https:\/\/blog.cloverdx.com\/gdpr-where-do-you-begin\n                      \n                    . Accessed July 17 2019"},{"key":"3_CR9","unstructured":"Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation). In: Official Journal of the European Union L119, pp. 1\u201388, May 2016. \n                      http:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=OJ:L:2016:119:TOC"},{"key":"3_CR10","unstructured":"Geambasu, R., Kohno, T., Levy, A.A., Levy, H.M.: Vanish: increasing data privacy with self-destructing data. In: Proceedings of the 18th USENIX Security Symposium. Montreal, Canada, pp. 299\u2013316 (2009). \n                      http:\/\/dl.acm.org\/citation.cfm?id=1855768.1855787"},{"key":"3_CR11","unstructured":"Gjengset, J., Schwarzkopf, M., Behrens, J., et al.: Noria: dynamic, partially-stateful data-flow for high-performance web applications. In: Proceedings of the 13th USENIX Symposium on Operating Systems Design and Implementation (OSDI), Carlsbad, California, USA, pp. 213\u2013231, October 2018"},{"key":"3_CR12","unstructured":"Hunt, T., Zhu, Z., Xu, Y., Peter, S., Witchel, E.: Ryoan: a distributed sandbox for untrusted computation on secret data. In: Proceedings of the 12th USENIX Conference on Operating Systems Design and Implementation (OSDI), Savannah, Georgia, USA, pp. 533\u2013549 (2016). \n                      http:\/\/dl.acm.org\/citation.cfm?id=3026877.3026919"},{"key":"3_CR13","unstructured":"Krohn, M., Yip, A., Brodsky, M., Morris, R., Walfish, M.: A world wide web without walls. In: Proceedings of the 6th Workshop on Hot Topics in Networks (HotNets), Atlanta, Georgia, USA, November 2007"},{"key":"3_CR14","unstructured":"Krohn, M., et al.: Information flow control for standard OS abstractions. In: Proceedings of the 21st ACM SIGOPS Symposium on Operating Systems Principles (SOSP), Stevenson, Washington, USA, pp. 321\u2013334 (2007). \n                      https:\/\/doi.acm.org\/10.1145\/1294261.1294293"},{"key":"3_CR15","doi-asserted-by":"publisher","unstructured":"Mansour, E., Sambra, A.V., Hawke, S., et al.: A demonstration of the solid platform for social web applications. In: Proceedings of the 25th International Conference Companion on World Wide Web (WWW), Montr\u00e9al, Qu\u00e9bec, Canada, pp. 223\u2013226 (2016). \n                      https:\/\/doi.org\/10.1145\/2872518.2890529","DOI":"10.1145\/2872518.2890529"},{"key":"3_CR16","unstructured":"Marzoev, A., Ara\u00fajo, L.T., Schwarzkopf, M., et al.: Towards multiverse databases. In: Proceedings of the 17th Workshop on Hot Topics in Operating Systems (HotOS), Bertinoro, Italy, pp. 88\u201395 (2019). \n                      https:\/\/doi.acm.org\/10.1145\/3317550.3321425"},{"key":"3_CR17","unstructured":"McSherry, F., Murray, D.G., Isaacs, R., Isard, M.: Differential dataflow. In: Proceedings of the 6th Biennial Conference on Innovative Data Systems Research (CIDR), Asilomar, California, USA, Janaury 2013"},{"key":"3_CR18","unstructured":"Mortier, R., Zhao, J., Crowcroft, J., et al.: Personal data management with the databox: what\u2019s inside the box? In: Proceedings of the 2016 ACM Workshop on Cloud-Assisted Networking (CAN), Irvine, California, USA, pp. 49\u201354 (2016). \n                      https:\/\/doi.acm.org\/10.1145\/3010079.3010082"},{"key":"3_CR19","unstructured":"Palkar, S., Zaharia, M.: DIY hosting for online privacy. In: Proceedings of the 16th ACM Workshop on Hot Topics in Networks (HotNets), Palo Alto, California, USA, pp. 1\u20137 (2017). \n                      https:\/\/doi.acm.org\/10.1145\/3152434.3152459"},{"key":"3_CR20","unstructured":"Polikarpova, N., Yang, J., Itzhaky, S., Solar-Lezama, A.: Type-driven repair for information flow security. CoRR abs\/1607.03445 (2016). \n                      arXiv: 1607.03445"},{"key":"3_CR21","unstructured":"Popa, R.A., Redfield, C.M.S., Zeldovich, N., Balakrishnan, H.: CryptDB: protecting confidentiality with encrypted query processing. In: Proceedings of the 23rd ACM Symposium on Operating Systems Principles (SOSP), Cascais, Portugal, pp. 85\u2013100 (2011). \n                      https:\/\/doi.acm.org\/10.1145\/2043556.2043566"},{"key":"3_CR22","unstructured":"Popa, R.A., et al.: Building web applications on top of encrypted data using mylar. In: Proceedings of the 11th USENIX Conference on Networked Systems Design and Implementation (NSDI), Seattle, Washington, USA, pp. 157\u2013172 (2014). \n                      http:\/\/dl.acm.org\/citation.cfm?id=2616448.2616464"},{"key":"3_CR23","unstructured":"Shah, A., Banakar, V., Shastri, S., Wasserman, M., Chidambaram, V.: Analyzing the impact of GDPR on storage systems. In: Proceedings of the 11th USENIX Workshop on Hot Topics in Storage and File Systems (HotStorage), July 2019"},{"key":"3_CR24","unstructured":"Shastri, S., Wasserman, M., Chidambaram, V.: How design, architecture, and operation of modern systems conflict with GDPR. In: Proceedings of the 11th USENIX Workshop on Hot Topics in Cloud Computing (Hot-Cloud), July 2019"},{"key":"3_CR25","unstructured":"Smith, O.: The GDPR racket: who\u2019s making money from this \\$9bn business shakedown, May 2018. \n                      https:\/\/www.forbes.com\/sites\/oliversmith\/2018\/05\/02\/the-gdpr-racket-whos-making-money-from-this-9bn-business-shakedown\/"},{"key":"3_CR26","unstructured":"Stonebraker, M., Abadi, D.J., Batkin, A., et al.: C-store: a column oriented DBMS. In: Proceedings of the 31st International Conference on Very Large Data Bases (VLDB). VLDB Endowment, Trondheim, Norway, pp. 553\u2013564 (2005). \n                      http:\/\/dl.acm.org\/citation.cfm?id=1083592.1083658"},{"key":"3_CR27","unstructured":"Sweney, M.: BA faces \u00a3183m fine over passenger data breach. The Guardian, July 2019. \n                      https:\/\/www.theguardian.com\/business\/2019\/jul\/08\/ba-fine-customer-data-breach-british-airways\n                      \n                    . Accessed July 17 2019"},{"key":"3_CR28","unstructured":"Sweney, M.: Marriott to be fined nearly \u00a3100m over GDPR breach. The Guardian, July 2019. \n                      https:\/\/www.theguardian.com\/business\/2019\/jul\/09\/marriott-fined-over-gdpr-breach-ico\n                      \n                    . Accessed July 17 2019"},{"key":"3_CR29","doi-asserted-by":"crossref","unstructured":"Volgushev, N., Schwarzkopf, M., Getchell, B., Varia, M., Lapets, A., Bestavros, A.: Conclave: secure multi-party computation on big data. In: Proceedings of the 14th ACM EuroSys Conference on Computer Systems (EuroSys), Dresden, Germany, pp. 3:1\u20133:18, March 2019. \n                      https:\/\/doi.acm.org\/10.1145\/3302424.3303982","DOI":"10.1145\/3302424.3303982"},{"key":"3_CR30","unstructured":"Wang, F., Ko, R., Mickens, J.: Riverbed: enforcing user-defined privacy constraints in distributed web services. In: Proceedings of the 16th USENIX Symposium on Networked Systems Design and Implementation (NSDI), Boston, Massachusetts, USA, pp. 615\u2013630, February 2019. \n                      https:\/\/www.usenix.org\/conference\/nsdi19\/presentation\/wang-frank"},{"key":"3_CR31","unstructured":"Wang, F., Yun, C., Goldwasser, S., Vaikuntanathan, V., Zaharia, M.: Splinter: practical private queries on public data. In: Proceedings of the 14th USENIX Symposium on Networked Systems Design and Implementation (NSDI), Boston, Massachusetts, USA, pp. 299\u2013313 (2017). \n                      http:\/\/www.usenix.org\/conference\/nsdi17\/technical-sessions\/presentation\/wang-frank"},{"key":"3_CR32","doi-asserted-by":"crossref","unstructured":"Yang, J., Hance, T., Austin, T.H., Solar-Lezama, A., Flanagan, C., Chong, S.: Precise, dynamic information flow for database backed applications. In: Proceedings of the 37th ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), Santa Barbara, California, USA, pp. 631\u2013647, June 2016. \n                      https:\/\/doi.acm.org\/10.1145\/2908080.2908098","DOI":"10.1145\/2908080.2908098"},{"key":"3_CR33","doi-asserted-by":"crossref","unstructured":"Yang, J., Yessenov, K., Solar-Lezama, A.: A language for automatically enforcing privacy policies. In: Proceedings of the 39th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL), Philadelphia, Pennsylvania, USA, pp. 85\u201396, January 2012. \n                      https:\/\/doi.acm.org\/10.1145\/2103656.2103669","DOI":"10.1145\/2103656.2103669"},{"key":"3_CR34","unstructured":"Yip, A., Wang, X., Zeldovich, N., Frans Kaashoek, M.: Improving application security with data flow assertions. In: Proceedings of the ACM SIGOPS 22nd Symposium on Operating Systems Principles (OSDI), Big Sky, Montana, USA, pp. 291\u2013304 (2009). \n                      https:\/\/doi.acm.org\/10.1145\/1629575.1629604"}],"container-title":["Lecture Notes in Computer Science","Heterogeneous Data Management, Polystores, and Analytics for Healthcare"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-33752-0_3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,10,25]],"date-time":"2019-10-25T17:09:36Z","timestamp":1572023376000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-33752-0_3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030337513","9783030337520"],"references-count":34,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-33752-0_3","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"23 October 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"Poly","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Workshop on Polystores and Other Systems for Heterogeneous Data","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Los Angeles, CA","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 August 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 August 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"poly2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/sites.google.com\/view\/poly19","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}