{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,2]],"date-time":"2025-12-02T15:08:08Z","timestamp":1764688088457,"version":"3.40.3"},"publisher-location":"Singapore","reference-count":36,"publisher":"Springer Nature Singapore","isbn-type":[{"type":"print","value":"9789819709885"},{"type":"electronic","value":"9789819709892"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-981-97-0989-2_21","type":"book-chapter","created":{"date-parts":[[2024,3,15]],"date-time":"2024-03-15T06:02:15Z","timestamp":1710482535000},"page":"265-276","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Privacy Engineering in\u00a0the\u00a0Data Mesh: Towards a\u00a0Decentralized Data Privacy Governance Framework"],"prefix":"10.1007","author":[{"given":"Nemania","family":"Borovits","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Indika","family":"Kumara","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Damian A.","family":"Tamburri","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Willem-Jan","family":"Van Den Heuvel","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,3,16]]},"reference":[{"key":"21_CR1","doi-asserted-by":"crossref","unstructured":"Agarwal, V., et al.: Compliance-as-code for cybersecurity automation in hybrid cloud. In: 2022 IEEE 15th International Conference on Cloud Computing (CLOUD), pp. 427\u2013437 (2022)","DOI":"10.1109\/CLOUD55607.2022.00066"},{"key":"21_CR2","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"442","DOI":"10.1007\/978-3-319-58469-0_30","volume-title":"ICT Systems Security and Privacy Protection","author":"T Antignac","year":"2017","unstructured":"Antignac, T., Sands, D., Schneider, G.: Data minimisation: a language-based approach. In: De Capitani di Vimercati, S., Martinelli, F. (eds.) SEC 2017. IAICT, vol. 502, pp. 442\u2013456. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-58469-0_30"},{"key":"21_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"73","DOI":"10.1007\/978-3-642-54069-1_5","volume-title":"Privacy Technologies and Policy","author":"C Bier","year":"2014","unstructured":"Bier, C., Birnstill, P., Krempel, E., Vagts, H., Beyerer, J.: Enhancing privacy by design from a developer\u2019s perspective. In: Preneel, B., Ikonomou, D. (eds.) APF 2012. LNCS, vol. 8319, pp. 73\u201385. Springer, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-642-54069-1_5"},{"key":"21_CR4","unstructured":"Cavoukian, A., et al.: Privacy by design: the 7 foundational principles. Information and privacy commissioner of Ontario, Canada 5, 12 (2009)"},{"key":"21_CR5","doi-asserted-by":"crossref","unstructured":"Chen, D., Zhao, H.: Data security and privacy protection issues in cloud computing. In: 2012 International Conference on Computer Science and Electronics Engineering, vol. 1, pp. 647\u2013651 (2012)","DOI":"10.1109\/ICCSEE.2012.193"},{"key":"21_CR6","volume-title":"Web Privacy with P3P","author":"L Cranor","year":"2002","unstructured":"Cranor, L.: Web Privacy with P3P. O\u2019Reilly Media Inc., Sebastopol (2002)"},{"key":"21_CR7","first-page":"273","volume":"10","author":"LF Cranor","year":"2012","unstructured":"Cranor, L.F.: Necessary but not sufficient: standardized mechanisms for privacy notice and choice. J. Telecommun. High Technol. Law 10, 273 (2012)","journal-title":"J. Telecommun. High Technol. Law"},{"issue":"6\u201310","key":"21_CR8","first-page":"71","volume":"2","author":"M Crosby","year":"2016","unstructured":"Crosby, M., Pattanayak, P., Verma, S., Kalyanaraman, V., et al.: Blockchain technology: beyond bitcoin. Appl. Innov. 2(6\u201310), 71 (2016)","journal-title":"Appl. Innov."},{"key":"21_CR9","unstructured":"Danezis, G., et al.: Privacy and data protection by design-from policy to engineering. arXiv preprint arXiv:1501.03726 (2015)"},{"issue":"1","key":"21_CR10","first-page":"6100","volume":"17","author":"YA De Montjoye","year":"2016","unstructured":"De Montjoye, Y.A., Rocher, L., Pentland, A.S.: bandicoot: a python toolbox for mobile phone metadata. J. Mach. Learn. Res. 17(1), 6100\u20136104 (2016)","journal-title":"J. Mach. Learn. Res."},{"key":"21_CR11","volume-title":"Data Mesh Delivering Data-Driven Value at Scale","author":"Z Dehghani","year":"2022","unstructured":"Dehghani, Z.: Data Mesh Delivering Data-Driven Value at Scale. O\u2019Reilly Media, Sebastopol (2022)"},{"key":"21_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"54","DOI":"10.1007\/3-540-36467-6_5","volume-title":"Privacy Enhancing Technologies","author":"C D\u00edaz","year":"2003","unstructured":"D\u00edaz, C., Seys, S., Claessens, J., Preneel, B.: Towards measuring anonymity. In: Dingledine, R., Syverson, P. (eds.) PET 2002. LNCS, vol. 2482, pp. 54\u201368. Springer, Heidelberg (2003). https:\/\/doi.org\/10.1007\/3-540-36467-6_5"},{"issue":"5","key":"21_CR13","doi-asserted-by":"publisher","first-page":"627","DOI":"10.1197\/jamia.M2716","volume":"15","author":"K El Emam","year":"2008","unstructured":"El Emam, K., Dankar, F.K.: Protecting privacy using k-anonymity. J. Am. Med. Inform. Assoc. 15(5), 627\u2013637 (2008)","journal-title":"J. Am. Med. Inform. Assoc."},{"key":"21_CR14","doi-asserted-by":"crossref","unstructured":"Fang, L., LeFevre, K.: Privacy wizards for social networking sites. In: Proceedings of the 19th International Conference on World Wide Web, pp. 351\u2013360 (2010)","DOI":"10.1145\/1772690.1772727"},{"key":"21_CR15","unstructured":"Friedland, G., Sommer, R.: Cybercasing the joint: on the privacy implications of geo-tagging. In: 5th USENIX Workshop on Hot Topics in Security (HotSec 2010) (2010)"},{"key":"21_CR16","unstructured":"Goedegebuure, A., et al.: Data mesh: a systematic gray literature review. arXiv preprint arXiv:2304.01062 (2023)"},{"key":"21_CR17","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"122","DOI":"10.1007\/978-3-030-99100-5_10","volume-title":"Privacy and Identity Management. Between Data Protection and Security","author":"E Gr\u00fcnewald","year":"2022","unstructured":"Gr\u00fcnewald, E.: Cloud native privacy engineering through DevPrivOps. In: Friedewald, M., Krenn, S., Schiering, I., Schiffner, S. (eds.) Privacy and Identity 2021. IAICT, vol. 644, pp. 122\u2013141. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-030-99100-5_10"},{"key":"21_CR18","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.cose.2015.05.002","volume":"53","author":"J Heurix","year":"2015","unstructured":"Heurix, J., Zimmermann, P., Neubauer, T., Fenz, S.: A taxonomy for privacy enhancing technologies. Comput. Secur. 53, 1\u201317 (2015)","journal-title":"Comput. Secur."},{"key":"21_CR19","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"446","DOI":"10.1007\/978-3-642-55415-5_38","volume-title":"ICT Systems Security and Privacy Protection","author":"J-H Hoepman","year":"2014","unstructured":"Hoepman, J.-H.: Privacy design strategies. In: Cuppens-Boulahia, N., Cuppens, F., Jajodia, S., Abou El Kalam, A., Sans, T. (eds.) SEC 2014. IAICT, vol. 428, pp. 446\u2013459. Springer, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-642-55415-5_38"},{"key":"21_CR20","unstructured":"Jarmul, K.: Privacy-first data via data mesh (2022). https:\/\/www.thoughtworks.com\/insights\/articles\/privacy-first-data-via-data-mesh"},{"issue":"1","key":"21_CR21","doi-asserted-by":"publisher","first-page":"148","DOI":"10.1145\/1629175.1629210","volume":"53","author":"V Khatri","year":"2010","unstructured":"Khatri, V., Brown, C.V.: Designing data governance. Commun. ACM 53(1), 148\u2013152 (2010)","journal-title":"Commun. ACM"},{"key":"21_CR22","series-title":"Classroom Companion: Business","doi-asserted-by":"publisher","first-page":"37","DOI":"10.1007\/978-3-031-19554-9_3","volume-title":"Data Science for Entrepreneurship","author":"I Kumara","year":"2023","unstructured":"Kumara, I., Kayes, A.S.M., Mundt, P., Schneider, R.: Data governance. In: Liebregts, W., van den Heuvel, W.-J., van den Born, A. (eds.) Data Science for Entrepreneurship. CCB, pp. 37\u201362. Springer, Cham (2023). https:\/\/doi.org\/10.1007\/978-3-031-19554-9_3"},{"key":"21_CR23","first-page":"132","volume":"31","author":"G L\u0103z\u0103roiu","year":"2018","unstructured":"L\u0103z\u0103roiu, G., Kovacova, M., Kliestikova, J., Kubala, P., Valaskova, K., Dengov, V.V.: Data governance and automated individual decision-making in the digital privacy general data protection regulation. Administratie si Manag. Public 31, 132\u2013142 (2018)","journal-title":"Administratie si Manag. Public"},{"issue":"1","key":"21_CR24","doi-asserted-by":"publisher","first-page":"1376","DOI":"10.1038\/srep01376","volume":"3","author":"YA de Montjoye","year":"2013","unstructured":"de Montjoye, Y.A., Hidalgo, C.A., Verleysen, M., Blondel, V.D.: Unique in the crowd: the privacy bounds of human mobility. Sci. Rep. 3(1), 1376 (2013)","journal-title":"Sci. Rep."},{"key":"21_CR25","volume-title":"Building Microservices","author":"S Newman","year":"2021","unstructured":"Newman, S.: Building Microservices. O\u2019Reilly Media Inc., Sebastopol (2021)"},{"issue":"2","key":"21_CR26","first-page":"158","volume":"43","author":"PN Otto","year":"2017","unstructured":"Otto, P.N., Ant\u00f3n, A.I.: Addressing legal requirements in requirements engineering: a systematic literature review. IEEE Trans. Softw. Eng. 43(2), 158\u2013171 (2017)","journal-title":"IEEE Trans. Softw. Eng."},{"key":"21_CR27","first-page":"68","volume":"23","author":"SL Pardau","year":"2018","unstructured":"Pardau, S.L.: The California consumer privacy act: towards a European-style privacy regime in the United States. J. Tech. L. & Pol\u2019y 23, 68 (2018)","journal-title":"J. Tech. L. & Pol\u2019y"},{"key":"21_CR28","unstructured":"General Data Protection Regulation: Regulation (EU) 2016\/679 of the European parliament and of the council. Regulation (EU) 679\/2016 (2016)"},{"key":"21_CR29","volume-title":"Microservices vs. Service-Oriented Architecture","author":"M Richards","year":"2015","unstructured":"Richards, M.: Microservices vs. Service-Oriented Architecture. O\u2019Reilly Media, Sebastopol (2015)"},{"key":"21_CR30","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1057\/jit.2014.25","volume":"31","author":"S Schneider","year":"2016","unstructured":"Schneider, S., Sunyaev, A.: Determinant factors of cloud-sourcing decisions: reflecting on the IT outsourcing literature in the era of cloud computing. J. Inf. Technol. 31, 1\u201331 (2016). https:\/\/doi.org\/10.1057\/jit.2014.25","journal-title":"J. Inf. Technol."},{"issue":"3","key":"21_CR31","doi-asserted-by":"publisher","first-page":"600","DOI":"10.1109\/JPROC.2018.2866769","volume":"107","author":"S Spiekermann","year":"2018","unstructured":"Spiekermann, S., Korunovska, J., Langheinrich, M.: Inside the organization: why privacy and security engineering is a challenge for engineers. Proc. IEEE 107(3), 600\u2013615 (2018)","journal-title":"Proc. IEEE"},{"issue":"5","key":"21_CR32","doi-asserted-by":"publisher","first-page":"557","DOI":"10.1142\/S0218488502001648","volume":"10","author":"L Sweeney","year":"2002","unstructured":"Sweeney, L.: k-anonymity: a model for protecting privacy. Int. J. Uncertainty Fuzziness Knowl.-Based Syst. 10(5), 557\u2013570 (2002)","journal-title":"Int. J. Uncertainty Fuzziness Knowl.-Based Syst."},{"key":"21_CR33","doi-asserted-by":"publisher","first-page":"201","DOI":"10.1007\/978-3-319-57959-7_7","volume-title":"The EU General Data Protection Regulation (GDPR)","author":"P Voigt","year":"2017","unstructured":"Voigt, P., von dem Bussche, A.: Enforcement and fines under the GDPR. In: Voigt, P., von dem Bussche, A. (eds.) The EU General Data Protection Regulation (GDPR), pp. 201\u2013217. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-57959-7_7"},{"key":"21_CR34","doi-asserted-by":"crossref","unstructured":"Wider, A., Verma, S., Akhtar, A.: Decentralized data governance as part of a data mesh platform: concepts and approaches. In: 2023 IEEE International Conference on Web Services (ICWS), pp. 746\u2013754 (2023)","DOI":"10.1109\/ICWS60048.2023.00101"},{"issue":"10","key":"21_CR35","doi-asserted-by":"publisher","first-page":"113","DOI":"10.1109\/MC.2022.3192948","volume":"55","author":"J Williams","year":"2022","unstructured":"Williams, J., Nee, L.: Privacy engineering. Computer 55(10), 113\u2013118 (2022)","journal-title":"Computer"},{"key":"21_CR36","unstructured":"Xu, R., Baracaldo, N., Joshi, J.: Privacy-preserving machine learning: methods, challenges and directions. arXiv preprint arXiv:2108.04417 (2021)"}],"container-title":["Lecture Notes in Computer Science","Service-Oriented Computing \u2013 ICSOC 2023 Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-97-0989-2_21","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,15]],"date-time":"2024-03-15T06:05:18Z","timestamp":1710482718000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-97-0989-2_21"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9789819709885","9789819709892"],"references-count":36,"URL":"https:\/\/doi.org\/10.1007\/978-981-97-0989-2_21","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"16 March 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICSOC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Service-Oriented Computing","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Rome","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Italy","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28 November 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"1 December 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icsoc2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/icsoc2023.diag.uniroma1.it\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"ConfTool","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"208","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"35","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"10","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"17% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"6","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"other papers accepted: 3 industry full papers, 3 keynote abstracts (in the front matter)","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}