{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T04:53:09Z","timestamp":1742964789833,"version":"3.40.3"},"publisher-location":"Cham","reference-count":25,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030855208"},{"type":"electronic","value":"9783030855215"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-85521-5_8","type":"book-chapter","created":{"date-parts":[[2021,8,26]],"date-time":"2021-08-26T04:03:10Z","timestamp":1629950590000},"page":"107-121","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Towards a Process-Based Approach to Compliance with GDPR"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2352-1621","authenticated-orcid":false,"given":"St\u00e9phane","family":"Cortina","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7882-8711","authenticated-orcid":false,"given":"Michel","family":"Picard","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0472-1994","authenticated-orcid":false,"given":"Samuel","family":"Renault","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4294-0848","authenticated-orcid":false,"given":"Philippe","family":"Valoggia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,8,25]]},"reference":[{"key":"8_CR1","unstructured":"Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation) (2016)"},{"issue":"4","key":"8_CR2","doi-asserted-by":"publisher","first-page":"1","DOI":"10.4018\/ijsita.2013100101","volume":"4","author":"S Cortina","year":"2013","unstructured":"Cortina, S., Renault, A., Picard, M.: TIPA process assessments: a means to improve business value of IT services. Int. J. Strat. Inf. Technol. App. (IJSITA) 4(4), 1\u201318 (2013). https:\/\/doi.org\/10.4018\/ijsita.2013100101","journal-title":"Int. J. Strat. Inf. Technol. App. (IJSITA)"},{"key":"8_CR3","unstructured":"Barafort, B., et al.: ITSM Process Assessment Supporting ITIL: Using TIPA to Assess and Improve your Processes with ISO 15504 and Prepare for ISO 20000 Certification, vol. 217. Van Haren, Zaltbommel (ISBN: 9789087535643) (2009)"},{"key":"8_CR4","series-title":"Communications in Computer and Information Science","doi-asserted-by":"publisher","first-page":"136","DOI":"10.1007\/978-3-030-28005-5_11","volume-title":"Systems, Software and Services Process Improvement","author":"S Cortina","year":"2019","unstructured":"Cortina, S., Valoggia, P., Barafort, B., Renault, A.: Designing a data protection process assessment model based on the GDPR. In: Walker, A., O\u2019Connor, R.V., Messnarz, R. (eds.) EuroSPI 2019. CCIS, vol. 1060, pp. 136\u2013148. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-28005-5_11"},{"key":"8_CR5","series-title":"MPI Studies on Intellectual Property and Competition Law","doi-asserted-by":"publisher","first-page":"257","DOI":"10.1007\/978-3-662-61920-9_13","volume-title":"Smart Urban Mobility","author":"Z Efroni","year":"2020","unstructured":"Efroni, Z.: Location data as contractual counter-performance: a consumer perspective on recent EU legislation. In: Finck, M., Lamping, M., Moscon, V., Richter, H. (eds.) Smart Urban Mobility. MSIPCL, vol. 29, pp. 257\u2013283. Springer, Heidelberg (2020). https:\/\/doi.org\/10.1007\/978-3-662-61920-9_13"},{"key":"8_CR6","doi-asserted-by":"publisher","first-page":"50","DOI":"10.1016\/j.tra.2019.09.026","volume":"131","author":"CD Cottrill","year":"2020","unstructured":"Cottrill, C.D.: MaaS surveillance: privacy considerations in mobility as a service. Transp. Res. Part A Policy Pract. 131, 50\u201357 (2020). https:\/\/doi.org\/10.1016\/j.tra.2019.09.026","journal-title":"Transp. Res. Part A Policy Pract."},{"issue":"4","key":"8_CR7","doi-asserted-by":"publisher","first-page":"2630","DOI":"10.1007\/s10664-020-09818-7","volume":"25","author":"E Engstr\u00f6m","year":"2020","unstructured":"Engstr\u00f6m, E., Storey, M.-A., Runeson, P., H\u00f6st, M., Baldassarre, M.T.: How software engineering research aligns with design science: a review. Empir. Softw. Eng. 25(4), 2630\u20132660 (2020). https:\/\/doi.org\/10.1007\/s10664-020-09818-7","journal-title":"Empir. Softw. Eng."},{"issue":"1","key":"8_CR8","doi-asserted-by":"publisher","first-page":"75","DOI":"10.2307\/25148625","volume":"28","author":"A Hevner","year":"2004","unstructured":"Hevner, A., March, S., Park, J., Ram, S.: Design science in information systems research. MIS Q. 28(1), 75\u2013105 (2004). https:\/\/doi.org\/10.2307\/25148625","journal-title":"MIS Q."},{"issue":"1","key":"8_CR9","doi-asserted-by":"publisher","first-page":"8","DOI":"10.1111\/j.1748-5991.2007.00002.x","volume":"1","author":"PJ May","year":"2007","unstructured":"May, P.J.: Regulatory regimes and accountability. Regulat. Govern. 1(1), 8\u201326 (2007). https:\/\/doi.org\/10.1111\/j.1748-5991.2007.00002.x","journal-title":"Regulat. Govern."},{"key":"8_CR10","unstructured":"Decker, Ch.: Goals-Based and Rules-Based Approaches to Regulation. SSRN scholarly Paper, ID 3717739, Social Science Research Network, 1 May 2018"},{"key":"8_CR11","unstructured":"CNPD: Accreditation requirements for General Data Protection Regulation (Regulation (EU) 2016\/679) Certified Assurance Report based Processing Activities (\u2018GDPR CARPA\u2019) certification scheme, Draft Updates, 30 July 2019"},{"key":"8_CR12","doi-asserted-by":"publisher","unstructured":"Yaqoob, I., et al.: Blockchain for Digital Twins: Recent Advances and Future Research Challenges. IEEE Netw. (2020). https:\/\/doi.org\/10.1109\/MNET.001.1900661.","DOI":"10.1109\/MNET.001.1900661"},{"key":"8_CR13","unstructured":"The Standard Data Protection Model: A method for Data Protection advising and controlling on the basis of uniform protection goals. Version 2.0b, Adopted by the 99. Conference of the Independent Data Protection Supervisory Authorities of the Federation and the L\u00e4nder on the 17. April 2020, https:\/\/www.datenschutzzentrum.de\/uploads\/sdm\/SDM-Methodology_V2.0b.pdf"},{"key":"8_CR14","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"446","DOI":"10.1007\/978-3-642-55415-5_38","volume-title":"ICT Systems Security and Privacy Protection","author":"J-H Hoepman","year":"2014","unstructured":"Hoepman, J.-H.: Privacy design strategies. In: Cuppens-Boulahia, N., Cuppens, F., Jajodia, S., Abbou El Kalam, A., Sans, T. (eds.) SEC 2014. IAICT, vol. 428, pp. 446\u2013459. Springer, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-642-55415-5_38"},{"issue":"1","key":"8_CR15","doi-asserted-by":"publisher","first-page":"67","DOI":"10.1109\/TSE.2008.88","volume":"35","author":"S Spiekermann","year":"2009","unstructured":"Spiekermann, S., Cranor, L.F.: Engineering privacy. IEEE Trans. Softw. Eng. 35(1), 67\u201382 (2009). https:\/\/doi.org\/10.1109\/TSE.2008.88","journal-title":"IEEE Trans. Softw. Eng."},{"key":"8_CR16","unstructured":"ISO\/IEC: ISO\/IEC 330xx Information Technology - Process Assessment (2013, 2017)"},{"key":"8_CR17","doi-asserted-by":"publisher","unstructured":"Colesky, M., et al.: A critical analysis of privacy design strategies. In: 2016 IEEE Security and Privacy Workshops (SPW), pp. 33\u201340 (2016). https:\/\/doi.org\/10.1109\/SPW.2016.23","DOI":"10.1109\/SPW.2016.23"},{"key":"8_CR18","unstructured":"CNIL \u2013 PIA (https:\/\/www.cnil.fr\/fr\/outil-pia-telechargez-et-installez-le-logiciel-de-la-cnil)"},{"key":"8_CR19","doi-asserted-by":"publisher","first-page":"e101","DOI":"10.1002\/spy2.101","volume":"3","author":"F Ferra","year":"2020","unstructured":"Ferra, F., Wagner, I., Boiten, E., Hadlington, L., Psychoula, I., Snape, R.: Challenges in assessing privacy impact: tales from the front lines. Secur. Priv. 3, e101 (2020). https:\/\/doi.org\/10.1002\/spy2.101","journal-title":"Secur. Priv."},{"key":"8_CR20","unstructured":"Alshammari, M., Simpson, A.C.: Towards an Effective PIA\u2212Based Risk Analysis: An Approach for Analysing Potential Privacy Risks (2018)"},{"key":"8_CR21","unstructured":"EDPB: Opinion 3\/2010 on the principle of accountability (2010). Adopted on 13 July 2010"},{"key":"8_CR22","doi-asserted-by":"publisher","first-page":"79","DOI":"10.1007\/s10115-017-1142-1","volume":"57","author":"M Hashmi","year":"2018","unstructured":"Hashmi, M., Governatori, G., Lam, H.P., Wynn, M.T.: Are we done with business compliance process: state of the art and challenges ahead. Knwol. Inf. Syst. 57, 79\u2013133 (2018)","journal-title":"Knwol. Inf. Syst."},{"key":"8_CR23","unstructured":"ISO\/IEC: ISO\/IEC 33004 Information Technology \u2014 Process assessment \u2014 Requirements for process reference, process assessment and maturity models (2015)"},{"key":"8_CR24","unstructured":"Barafort, B., Renault, A., Picard, M., Cortina, S.: A Transformation Process for Building PRMs and PAMs based on a Collection of Requirements \u2013 Example with ISO\/IEC 20000. In: 8th International SPICE 2008 Conference, Nuremberg (2008)"},{"key":"8_CR25","unstructured":"Pries-Heje, J., Johansen, J.: Spi manifesto. European System & Software Process Improvement and Innovation (2010)"}],"container-title":["Communications in Computer and Information Science","Systems, Software and Services Process Improvement"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-85521-5_8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,9,21]],"date-time":"2021-09-21T13:05:33Z","timestamp":1632229533000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-85521-5_8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030855208","9783030855215"],"references-count":25,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-85521-5_8","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"25 August 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"EuroSPI","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Conference on Software Process Improvement","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Krems","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Austria","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"1 September 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"3 September 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"eurospi2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/2021.eurospi.net\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EuroSPI proprietary system","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"100","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"42","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"9","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"42% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Due to the COVID-19 pandemic the conference was partially held online.","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}