{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T22:32:34Z","timestamp":1784068354377,"version":"3.55.0"},"publisher-location":"Cham","reference-count":20,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030589509","type":"print"},{"value":"9783030589516","type":"electronic"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-58951-6_36","type":"book-chapter","created":{"date-parts":[[2020,9,11]],"date-time":"2020-09-11T09:07:40Z","timestamp":1599815260000},"page":"736-755","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":18,"title":["GDPR \u2013 Challenges for Reconciling Legal Rules with Technical Reality"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3192-2430","authenticated-orcid":false,"given":"Miros\u0142aw","family":"Kuty\u0142owski","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9165-1110","authenticated-orcid":false,"given":"Anna","family":"Lauks-Dutka","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0848-0873","authenticated-orcid":false,"given":"Moti","family":"Yung","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2020,9,12]]},"reference":[{"key":"36_CR1","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"681","DOI":"10.1007\/978-3-030-29959-0_33","volume-title":"Computer Security \u2013 ESORICS 2019","author":"E Arfelt","year":"2019","unstructured":"Arfelt, E., Basin, D., Debois, S.: Monitoring the GDPR. In: Sako, K., Schneider, S., Ryan, P.Y.A. (eds.) ESORICS 2019. LNCS, vol. 11735, pp. 681\u2013699. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-29959-0_33"},{"key":"36_CR2","unstructured":"Castro, D., Chivot, E.: The EU needs to reform the GDPR to remain competitive in the algorithmic economy. Center for Data Innovation (2019). https:\/\/www.datainnovation.org\/2019\/05\/the-eu-needs-to-reform-the-gdpr-to-remain-competitive-in-the\/\/-algorithmic-economy\/"},{"key":"36_CR3","unstructured":"Chivot, E.: COVID-19 crisis shows limits of EU data protection rules and AI readiness. Center for Data Innovation (2020). https:\/\/www.datainnovation.org\/2020\/03\/covid-19-crisis-shows-limits-of-eu-data-protection-rules-and\/\/-ai-readiness\/"},{"key":"36_CR4","unstructured":"Cohen, A., Nissim, K.: Towards formalizing the GDPR\u2019s notion of singling out. CoRR abs\/1904.06009 (2019). http:\/\/arxiv.org\/abs\/1904.06009"},{"key":"36_CR5","unstructured":"Directorate-General for Communications Networks: Study on data sharing between companies in Europe. The European Commission (2018). https:\/\/publications.europa.eu\/en\/publication-detail\/-\/publication\/8b8776ff-4834-11e8-be1d-01aa75ed71a1\/language-en"},{"key":"36_CR6","unstructured":"Druschel, P., Backes, M., Tirtea, R.: The right to be forgotten - between expectations and practice. ENISA (2012). https:\/\/www.enisa.europa.eu\/publications\/the-right-to-be-forgotten\/at_download\/fullReport"},{"key":"36_CR7","doi-asserted-by":"publisher","first-page":"1","DOI":"10.17487\/RFC2692","volume":"2692","author":"CM Ellison","year":"1999","unstructured":"Ellison, C.M.: SPKI requirements. RFC 2692, 1\u201314 (1999). https:\/\/doi.org\/10.17487\/RFC2692","journal-title":"RFC"},{"key":"36_CR8","unstructured":"EU Presidency: Proposal for a Regulation of the European Parliament and of the Council concerning the respect for private life and the protection of personal data in electronic communications and repealing Directive 2002\/58\/EC (Regulation on Privacy and Electronic Communications) (amendments) (2020). https:\/\/privacyblogfullservice.huntonwilliamsblogs.com\/wp-content\/uploads\/sites\/28\/2020\/02\/CONSIL_ST_5979_2020_INIT_EN_TXT.pdf"},{"key":"36_CR9","unstructured":"European Data Protection Supervisor: Annual report 2019 (2019). https:\/\/edps.europa.eu\/sites\/edp\/files\/publication\/2020-03-17_annual_report_2020_en.pdf"},{"key":"36_CR10","unstructured":"Farshid, S., Reitz, A., Ro\u00dfbach, P.: Design of a forgetting blockchain: A possible way to accomplish GDPR compatibility. In: Bui, T. (ed.) 52nd Hawaii International Conference on System Sciences, HICSS 2019, Grand Wailea, Maui, Hawaii, USA, 8\u201311 January 2019, pp. 1\u20139. ScholarSpace\/AIS Electronic Library (AISeL) (2019). http:\/\/hdl.handle.net\/10125\/60145"},{"key":"36_CR11","unstructured":"Labadie, C., Legner, C.: Understanding data protection regulations from a data management perspective: a capability-based approach to EU-GDPR. In: Ludwig, T., Pipek, V. (eds.) Human Practice. Digital Ecologies. Our Future. 14. Internationale Tagung Wirtschaftsinformatik (WI 2019), 24\u201327 February 2019, Siegen, Germany, pp. 1292\u20131306. University of Siegen, Germany\/AISeL (2019). https:\/\/aisel.aisnet.org\/wi2019\/track11\/papers\/3"},{"key":"36_CR12","unstructured":"Martino, M.D., Robyns, P., Weyts, W., Quax, P., Lamotte, W., Andries, K.: Personal information leakage by abusing the GDPR \u2018right of access\u2019. In: Lipford, H.R. (ed.) Fifteenth Symposium on Usable Privacy and Security, SOUPS 2019, Santa Clara, CA, USA, 11\u201313 August 2019. USENIX Association (2019). https:\/\/www.usenix.org\/conference\/soups2019\/presentation\/dimartino"},{"issue":"1","key":"36_CR13","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1093\/cybsec\/tyy001","volume":"4","author":"EA Politou","year":"2018","unstructured":"Politou, E.A., Alepis, E., Patsakis, C.: Forgetting personal data and revoking consent under the GDPR: challenges and proposed solutions. J. Cybersecur. 4(1), 1\u201320 (2018). https:\/\/doi.org\/10.1093\/cybsec\/tyy001","journal-title":"J. Cybersecur."},{"key":"36_CR14","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"47","DOI":"10.1007\/978-3-030-39634-3_5","volume-title":"Digital Transformation for a Sustainable Society in the 21st Century","author":"U Reviglio","year":"2020","unstructured":"Reviglio, U.: Towards a right not to be deceived? An interdisciplinary analysis of media personalization in the light of the GDPR. In: Pappas, I.O., Mikalef, P., Dwivedi, Y.K., Jaccheri, L., Krogstie, J., M\u00e4ntym\u00e4ki, M. (eds.) I3E 2019. IAICT, vol. 573, pp. 47\u201359. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-39634-3_5"},{"key":"36_CR15","unstructured":"Roig, A.: Safeguards for the right not to be subject to a decision based solely on automated processing (article 22 GDPR). Eur. J. Law Technol. 8(3) (2017). http:\/\/ejlt.org\/article\/view\/570"},{"key":"36_CR16","unstructured":"Shah, A., Banakar, V., Shastri, S., Wasserman, M., Chidambaram, V.: Analyzing the impact of GDPR on storage systems. In: Peek, D., Yadgar, G. (eds.) 11th USENIX Workshop on Hot Topics in Storage and File Systems, HotStorage 2019, Renton, WA, USA, 8\u20139 July 2019. USENIX Association (2019). https:\/\/www.usenix.org\/conference\/hotstorage19\/presentation\/banakar"},{"key":"36_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"168","DOI":"10.1007\/978-3-030-17287-9_14","volume-title":"Persuasive Technology: Development of Persuasive and Behavior Change Support Systems","author":"X Shao","year":"2019","unstructured":"Shao, X., Oinas-Kukkonen, H.: How does GDPR (General Data Protection Regulation) affect persuasive system design: design requirements and cost implications. In: Oinas-Kukkonen, H., Win, K.T., Karapanos, E., Karppinen, P., Kyza, E. (eds.) PERSUASIVE 2019. LNCS, vol. 11433, pp. 168\u2013173. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-17287-9_14"},{"issue":"7","key":"36_CR18","first-page":"1064","volume":"13","author":"S Shastri","year":"2020","unstructured":"Shastri, S., Banakar, V., Wasserman, M., Kumar, A., Chidambaram, V.: Understanding and benchmarking the impact of GDPR on database systems. PVLDB 13(7), 1064\u20131077 (2020). http:\/\/www.vldb.org\/pvldb\/vol13\/p1064-shastri.pdf","journal-title":"PVLDB"},{"key":"36_CR19","unstructured":"The European Parliament and the Council of the European Union: Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/ec (General Data Protection Regulation). Off. J. Eur. Union 119(1) (2016)"},{"key":"36_CR20","unstructured":"Wallace, N., Castro, D.: The impact of the EU\u2019s new data protection regulation on AI. Center for Data Innovation (2018). http:\/\/www2.datainnovation.org\/2018-impact-gdpr-ai.pdf"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2020"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-58951-6_36","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,10]],"date-time":"2025-09-10T22:03:16Z","timestamp":1757541796000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-58951-6_36"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030589509","9783030589516"],"references-count":20,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-58951-6_36","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"12 September 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Guildford","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"United Kingdom","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 September 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 September 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/esorics2020.sccs.surrey.ac.uk\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"366","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"72","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"20% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3,16","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"9,1","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"The conference was held virtually due to the COVID-10 pandemic.","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}