{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,5]],"date-time":"2025-10-05T16:56:25Z","timestamp":1759683385258},"reference-count":42,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2012,4,29]],"date-time":"2012-04-29T00:00:00Z","timestamp":1335657600000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Requirements Eng"],"published-print":{"date-parts":[[2012,6]]},"DOI":"10.1007\/s00766-012-0152-5","type":"journal-article","created":{"date-parts":[[2012,4,28]],"date-time":"2012-04-28T03:54:52Z","timestamp":1335585292000},"page":"99-115","source":"Crossref","is-referenced-by-count":28,"title":["A legal cross-references taxonomy for reasoning about compliance requirements"],"prefix":"10.1007","volume":"17","author":[{"given":"Jeremy C.","family":"Maxwell","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Annie I.","family":"Ant\u00f3n","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peter","family":"Swire","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Maria","family":"Riaz","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Christopher M.","family":"McCraw","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2012,4,29]]},"reference":[{"issue":"3","key":"152_CR1","doi-asserted-by":"crossref","first-page":"169","DOI":"10.1007\/s00766-003-0183-z","volume":"9","author":"AI Ant\u00f3n","year":"2004","unstructured":"Ant\u00f3n AI, Earp JB (2004) A requirements taxonomy for reducing web site privacy vulnerabilities. Requir Eng J 9(3):169\u2013185","journal-title":"Requir Eng J"},{"issue":"14","key":"152_CR2","doi-asserted-by":"crossref","first-page":"967","DOI":"10.1016\/S0950-5849(03)00095-8","volume":"45","author":"AI Ant\u00f3n","year":"2003","unstructured":"Ant\u00f3n AI, Earp JB, Carter RA (2003) Precluding incongruous behavior by aligning software requirements with security and privacy policies. Inf Softw Technol 45(14):967\u2013977","journal-title":"Inf Softw Technol"},{"key":"152_CR3","doi-asserted-by":"crossref","unstructured":"Bench-Capon TJM, Robinson GO, Routen TW, Sergot MJ (1987) Logic programming for large scale applications in law: a formalisation of supplementary benefit legislation. In: 1st international conference on AI and Law, 1987, pp 190\u2013198","DOI":"10.1145\/41735.41757"},{"key":"152_CR4","unstructured":"Berenbach B, Gruseman D, Cleland-Huang J (2010) Application of just in time tracing to regulatory codes. In: 8th conference on systems engineering research"},{"issue":"2","key":"152_CR5","doi-asserted-by":"crossref","first-page":"25","DOI":"10.1109\/52.506460","volume":"13","author":"B Boehm","year":"1996","unstructured":"Boehm B, In H (1996) Identifying quality-requirements conflicts. IEEE Softw 13(2):25\u201335","journal-title":"IEEE Softw"},{"key":"152_CR6","unstructured":"Breaux TD (2009) Legal requirements acquisition for the specification of legally compliant information systems, PhD Thesis, NCSU"},{"issue":"1","key":"152_CR7","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1109\/TSE.2007.70746","volume":"34","author":"TD Breaux","year":"2008","unstructured":"Breaux TD, Ant\u00f3n AI (2008) Analyzing regulatory rules for privacy and security requirements. IEEE Trans Softw Eng 34(1):5\u201320","journal-title":"IEEE Trans Softw Eng"},{"key":"152_CR8","doi-asserted-by":"crossref","unstructured":"Breaux TD, Vail MW, Ant\u00f3n AI (2006) Towards regulatory compliance: extracting rights and obligations to align requirements with regulations. In: 14th IEEE international requirements engineering conference 2006, pp 46\u201355","DOI":"10.1109\/RE.2006.68"},{"key":"152_CR9","doi-asserted-by":"crossref","unstructured":"Cholvy (1999) Checking regulation consistency by using SOL-resolution. In: 7th international conference on AI & Law, pp 73\u201379","DOI":"10.1145\/323706.323717"},{"key":"152_CR10","doi-asserted-by":"crossref","unstructured":"Cleland-Huang J, Czauderna A, Gibiec M, Emenecker J (2010) A machine learning approach for tracing regulatory codes to product specific requirements. In: 32nd IEEE international conference on software engineering","DOI":"10.1145\/1806799.1806825"},{"key":"152_CR11","unstructured":"Cohen ML, Olson KC (2000) Legal research, West"},{"key":"152_CR12","doi-asserted-by":"crossref","first-page":"149","DOI":"10.1007\/s00766-003-0173-1","volume":"8","author":"DE Damian","year":"2003","unstructured":"Damian DE, Zowghi D (2003) Requirements engineering challenges in multi-site software development organizations. Requir Eng J 8:149\u2013160","journal-title":"Requir Eng J"},{"key":"152_CR13","doi-asserted-by":"crossref","unstructured":"Easterbrook S, Nuseibeh B (1995) Managing inconsistencies in an evolving specification. In: Proceedings of the 2nd IEEE international symposium on requirements engineering, pp 48\u201355","DOI":"10.1109\/ISRE.1995.512545"},{"issue":"6","key":"152_CR14","doi-asserted-by":"crossref","first-page":"836","DOI":"10.1109\/32.824413","volume":"25","author":"W Emmerich","year":"1999","unstructured":"Emmerich W, Finkelstein A, Montangero C, Antonelli S, Armitage S, Stevens R (1999) Managing standards compliance. Trans Softw Eng 25(6):836\u2013851","journal-title":"Trans Softw Eng"},{"key":"152_CR15","unstructured":"van Engers TM, Boekenoogen MR (2003) Improving legal quality: an application report. In: 9th international conference on AI and Law, pp 284\u2013292"},{"key":"152_CR16","unstructured":"2010 Global Information Survey, Ernst & Young, 2010"},{"key":"152_CR17","doi-asserted-by":"crossref","unstructured":"Ghanavati S, Amyot D, Peyton L (2009) Compliance analysis based on a goal-oriented requirement language evaluation methodology. In: Proceedings of the 17th IEEE international conference on requirements engineering, pp 133\u2013142","DOI":"10.1109\/RE.2009.42"},{"key":"152_CR18","volume-title":"Theoretical sensitivity","author":"BG Glaser","year":"1978","unstructured":"Glaser BG (1978) Theoretical sensitivity. Sociology Press, Mill Valley, CA"},{"key":"152_CR19","volume-title":"The discovery of grounded theory","author":"BG Glaser","year":"1967","unstructured":"Glaser BG, Strauss AL (1967) The discovery of grounded theory. Aldine Transaction, Chicago"},{"key":"152_CR20","unstructured":"Hamdaqa M, Hamou-Lhadj A (2009) Citation analysis: an approach for facilitating the understanding and the analysis of regulatory compliance documents. In: 6th international conference on information technology: new generations, pp 278\u2013283"},{"key":"152_CR21","unstructured":"Hart HM Jr, Wechsler H, Fallon RH Jr, Manning JF, Meltzer DJ, Shapiro DL (2009) The federal courts and the federal system, 6th edn. Foundation Press, Minneapolis"},{"issue":"1","key":"152_CR22","doi-asserted-by":"crossref","first-page":"16","DOI":"10.2307\/785533","volume":"23","author":"WN Hohfeld","year":"1913","unstructured":"Hohfeld WN (1913) Some fundamental legal conceptions as applied in judicial reasoning. Yale Law J 23(1):16\u201359","journal-title":"Yale Law J"},{"key":"152_CR23","doi-asserted-by":"crossref","unstructured":"Karlsson L, Dahlstedt AG, Regnell B, Natt och Dag J, Persson A (2007) Requirements engineering challenges in market-driven software development-an interview study with practioners. Inf Softw Technol 49:588\u2013604","DOI":"10.1016\/j.infsof.2007.02.008"},{"key":"152_CR24","unstructured":"Krebs B (2009) Choice point breach, exposed 13,750 consumer records. The Washington Post. http:\/\/voices.washingtonpost.com\/securityfix\/2009\/10\/choicepoint_breach_exposed_137.html . Accessed 19 Oct 2009"},{"issue":"11","key":"152_CR25","doi-asserted-by":"crossref","first-page":"908","DOI":"10.1109\/32.730542","volume":"24","author":"A Lamsweerde van","year":"1998","unstructured":"van Lamsweerde A, Darimont R, Letier E (1998) Managing conflicts in goal-driven requirements engineering. IEEE Trans Softw Eng 24(11):908\u2013926","journal-title":"IEEE Trans Softw Eng"},{"key":"152_CR26","doi-asserted-by":"crossref","unstructured":"Massey AK, Otto PN, Ant\u00f3n AI (2009) Prioritizing legal requirements. In: 2nd international workshop on RE and Law","DOI":"10.1109\/RELAW.2009.9"},{"key":"152_CR27","doi-asserted-by":"crossref","unstructured":"Maxwell JC, Ant\u00f3n AI (2009) Developing production rule models to aid in acquiring requirements from legal texts. In: 17th international IEEE requirements engineering conference, pp 101\u2013110","DOI":"10.1109\/RE.2009.21"},{"key":"152_CR28","unstructured":"Maxwell JC, Ant\u00f3n AI (2010) A refined production rule model for aiding in regulatory compliance. NCSU technical report TR-2010-3, ftp:\/\/ftp.ncsu.edu\/pub\/unity\/lockers\/ftp\/csc_anon\/tech\/2010\/TR-2010-3.pdf"},{"key":"152_CR29","doi-asserted-by":"crossref","unstructured":"Maxwell JC, Ant\u00f3n AI (2010) The production rule framework: developing a canonical set of software requirements for compliance with law. In: 1st ACM international health informatics symposium","DOI":"10.1145\/1882992.1883092"},{"key":"152_CR30","doi-asserted-by":"crossref","unstructured":"Maxwell JC, Anton AI, Swire P (2011) A legal cross-references taxonomy for identifying conflicting software requirements. In: 19th IEEE international requirements engineering conference","DOI":"10.1109\/RE.2011.6051647"},{"key":"152_CR31","doi-asserted-by":"crossref","unstructured":"May MJ, Gunter CA, Lee I (2006) Privacy APIs: access control techniques to analyze and verify legal privacy policies. In: 19th IEEE computer section foundations workshop, pp 85\u201397","DOI":"10.1109\/CSFW.2006.24"},{"key":"152_CR32","doi-asserted-by":"crossref","unstructured":"Otto PN, Ant\u00f3n AI (2007) Addressing legal requirements in requirements engineering. In: 15th IEEE international requirements engineering conference, pp 5\u201314","DOI":"10.1109\/RE.2007.65"},{"issue":"5","key":"152_CR33","doi-asserted-by":"crossref","first-page":"15","DOI":"10.1109\/MSP.2007.126","volume":"5","author":"PN Otto","year":"2007","unstructured":"Otto PN, Ant\u00f3n AI, Baumer DL (2007) The choice point dilemma: how data brokers should handle the privacy of personal information. IEEE Secur Priv 5(5):15\u201323","journal-title":"IEEE Secur Priv"},{"key":"152_CR34","doi-asserted-by":"crossref","unstructured":"Robinson WN, Fickas S (1994) Supporting multi-perspective requirements engineering. In: 1st IEEE international requirements engineering conference, pp 206\u2013215","DOI":"10.1109\/ICRE.1994.292383"},{"key":"152_CR35","doi-asserted-by":"crossref","unstructured":"Siena A, Mylopoulos J, Perini A, Susi A (2009) Designing law-compliant software requirements. In: 28th international conference on conceptual modeling","DOI":"10.1007\/978-3-642-04840-1_35"},{"key":"152_CR36","unstructured":"Thurimella AK, Bruegge B (2007) Evolution in product line requirements engineering: a rationale management approach. In: 15th IEEE requirements engineering conference, pp 254\u2013257"},{"key":"152_CR37","unstructured":"Vijayan J (2011) Stanford hospital blames contractor for data breach. http:\/\/www.computerworld.com"},{"key":"152_CR38","unstructured":"Vijayan J (2011) Defense Dept. Hit with $4.9B Lawsuit over data breach. http:\/\/www.computerworld.com"},{"key":"152_CR39","unstructured":"Watt v. Alaska, 451 U.S. 259, 285-86 (1981) (Stewart, J., dissenting) (quoting Theodore Sedgwick & John Norton Pomeroy. A treatise on the rules which govern the interpretation and construction of statutory and constitutional law 14 (2nd edn., Baker, Voorhis & Co. 1874)"},{"key":"152_CR40","unstructured":"Yin RK (2003) Case study research: design and methods. In: Applied social research methods series, vol 5, 3rd ed"},{"key":"152_CR41","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1007\/s00766-010-0108-6","volume":"16","author":"JD Young","year":"2010","unstructured":"Young JD (2010) Commitment analysis to operationalize software requirements from privacy notices. Requir Eng J 16:33\u201346","journal-title":"Requir Eng J"},{"key":"152_CR42","doi-asserted-by":"crossref","unstructured":"Zhang P, Koppaka L(2007) Semantics-based legal citation network. In: 11th international conference on AI and Law, pp 123\u2013130","DOI":"10.1145\/1276318.1276342"}],"container-title":["Requirements Engineering"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00766-012-0152-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s00766-012-0152-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00766-012-0152-5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,28]],"date-time":"2019-06-28T01:43:41Z","timestamp":1561686221000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s00766-012-0152-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,4,29]]},"references-count":42,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2012,6]]}},"alternative-id":["152"],"URL":"https:\/\/doi.org\/10.1007\/s00766-012-0152-5","relation":{},"ISSN":["0947-3602","1432-010X"],"issn-type":[{"value":"0947-3602","type":"print"},{"value":"1432-010X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,4,29]]}}}