{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T20:30:13Z","timestamp":1783110613509,"version":"3.54.6"},"reference-count":43,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2021,11,17]],"date-time":"2021-11-17T00:00:00Z","timestamp":1637107200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,11,17]],"date-time":"2021-11-17T00:00:00Z","timestamp":1637107200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/501100002790","name":"Canadian Network for Research and Innovation in Machining Technology, Natural Sciences and Engineering Research Council of Canada","doi-asserted-by":"publisher","award":["Discovery, Discovery Accelerator and CRC programs"],"award-info":[{"award-number":["Discovery, Discovery Accelerator and CRC programs"]}],"id":[{"id":"10.13039\/501100002790","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001866","name":"Fonds National de la Recherche Luxembourg","doi-asserted-by":"publisher","award":["BRIDGES\/19\/IS\/13759068\/ARTAGO"],"award-info":[{"award-number":["BRIDGES\/19\/IS\/13759068\/ARTAGO"]}],"id":[{"id":"10.13039\/501100001866","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Softw Syst Model"],"published-print":{"date-parts":[[2021,12]]},"DOI":"10.1007\/s10270-021-00935-5","type":"journal-article","created":{"date-parts":[[2021,11,17]],"date-time":"2021-11-17T18:03:03Z","timestamp":1637172183000},"page":"2071-2087","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":37,"title":["Modeling data protection and privacy: application and experience with GDPR"],"prefix":"10.1007","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1656-3057","authenticated-orcid":false,"given":"Damiano","family":"Torre","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mauricio","family":"Alferez","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ghanem","family":"Soltana","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mehrdad","family":"Sabetzadeh","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lionel","family":"Briand","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2021,11,17]]},"reference":[{"key":"935_CR1","unstructured":"Alpaydin, E.: Machine Learning: The New AI. MIT Press (2016)"},{"key":"935_CR2","doi-asserted-by":"crossref","unstructured":"Arora, C., Sabetzadeh, M., Briand, L.C., Zimmer, F.: Extracting domain models from natural-language requirements: Approach and industrial evaluation. In: Proceedings of the 19th IEEE\/ACM International Conference on Model Driven Engineering Languages and Systems (MoDELS\u201916), pp. 250\u2013260 (2016)","DOI":"10.1145\/2976767.2976769"},{"key":"935_CR3","doi-asserted-by":"crossref","unstructured":"Ayala-Rivera, V., Pasquale, L.: The grace period has ended: An approach to operationalize GDPR requirements. In: Proceedings of 31st IEEE International Conference on Requirements Engineering (RE\u201918), pp. 136\u2013146 (2018)","DOI":"10.1109\/RE.2018.00023"},{"key":"935_CR4","doi-asserted-by":"crossref","unstructured":"Brambilla, M., Cabot, J., Wimmer, M.: Model-Driven Software Engineering in Practice, 2nd edn. Morgan & Claypool Publishers (2016)","DOI":"10.1007\/978-3-031-02549-5"},{"key":"935_CR5","doi-asserted-by":"crossref","unstructured":"Breaux, T.: Exercising due diligence in legal requirements acquisition: A tool-supported, frame-based approach. In: Proceedings of 17th IEEE International Conference on Requirements Engineering (RE\u201909), pp. 225\u2013230 (2009)","DOI":"10.1109\/RE.2009.46"},{"key":"935_CR6","doi-asserted-by":"crossref","unstructured":"Burmeister, F., Drews, P., Schirmer, I.: A privacy-driven enterprise architecture meta-model for supporting compliance with the general data protection regulation. In: Bui, T. (ed.) 52nd Hawaii International Conference on System Sciences, HICSS 2019, Grand Wailea, Maui, Hawaii, USA, January 8\u201311, 2019, pp. 1\u201310. ScholarSpace (2019)","DOI":"10.24251\/HICSS.2019.729"},{"key":"935_CR7","doi-asserted-by":"crossref","unstructured":"Cabot, J., Claris\u00f3, R., Riera, D.: UMLtoCSP: A tool for the formal verification of UML\/OCL models using constraint programming. In: Proceedings of the 22nd IEEE\/ACM International Conference on Automated Software Engineering (ASE\u201907), pp. 547\u2013548 (2007)","DOI":"10.1145\/1321631.1321737"},{"key":"935_CR8","doi-asserted-by":"crossref","unstructured":"Caramujo, J., Rodrigues\u00a0da Silva, A., Monfared, S., Ribeiro, A., Calado, P., Breaux, T.: RSL-IL4Privacy: A domain-specific language for the rigorous specification of privacy policies. Requir. Eng. 24(1), 1\u201326 (2019)","DOI":"10.1007\/s00766-018-0305-2"},{"issue":"4","key":"935_CR9","doi-asserted-by":"publisher","first-page":"332","DOI":"10.1016\/j.knosys.2007.11.002","volume":"21","author":"PW Chung","year":"2008","unstructured":"Chung, P.W., Cheung, L.Y., Machin, C.H.: Compliance flow\u2014managing the compliance of dynamic and complex processes. Knowl. Syst. 21(4), 332\u2013354 (2008)","journal-title":"Knowl. Syst."},{"key":"935_CR10","unstructured":"Clements, P., Northrop, L.: Software Product Lines: Practices and Patterns. Addison-Wesley (2001)"},{"key":"935_CR11","unstructured":"Diamantopoulou, V., Angelopoulos, K., Pavlidis, M., Mouratidis, H.: A metamodel for gdpr-based privacy level agreements. In: Cabanillas, C., Espa\u00f1a, S., Farshidi, S. (eds.) Proceedings of the ER Forum 2017 and the ER 2017 Demo Track co-located with the 36th International Conference on Conceptual Modelling (ER 2017), Valencia, Spain, - November 6\u20139, 2017, CEUR Workshop Proceedings, vol. 1979, pp. 285\u2013291. http:\/\/CEUR-WS.org (2017)"},{"issue":"6","key":"935_CR12","doi-asserted-by":"publisher","first-page":"836","DOI":"10.1109\/32.824413","volume":"25","author":"W Emmerich","year":"1999","unstructured":"Emmerich, W., Finkelstein, A., Montangero, C., Antonelli, S., Armitage, S., Stevens, R.: Managing standards compliance. IEEE Trans. Softw. Eng. 25(6), 836\u2013851 (1999)","journal-title":"IEEE Trans. Softw. Eng."},{"key":"935_CR13","unstructured":"EU-GDPR: EU GDPR portal (2019). https:\/\/eugdpr.org"},{"key":"935_CR14","unstructured":"European Union: The GDPR: New opportunities, new obligations. Justice and Consumers (2018)"},{"key":"935_CR15","unstructured":"European Union: General data protection regulation. Official Journal of the European Union (2018). http:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/PDF\/?uri=CELEX:32016R0679"},{"key":"935_CR16","doi-asserted-by":"crossref","unstructured":"France, R., Rumpe, B.: Model-driven development of complex software: A research roadmap. In: Proceedings of 2007 Workshop on the Future of Software Engineering (FOSE \u201907), pp. 37\u201354 (2007)","DOI":"10.1109\/FOSE.2007.14"},{"key":"935_CR17","doi-asserted-by":"crossref","unstructured":"Ghanavati, S., Rifaut, A., Dubois, E., Amyot, D.: Goal-oriented compliance with multiple regulations. In: Proceedings of 22nd IEEE International Conference on Requirements Engineering (RE\u201914), pp. 73\u201382 (2014)","DOI":"10.1109\/RE.2014.6912249"},{"key":"935_CR18","doi-asserted-by":"crossref","unstructured":"Guarda, P., Ranise, S., Siswantoro, H.: Security analysis and legal compliance checking for the design of privacy-friendly information systems. In: Proceedings o 22nd ACM on Symposium on Access Control Models and Technologies (SACMAT\u201917), pp. 247\u2013254 (2017)","DOI":"10.1145\/3078861.3078879"},{"key":"935_CR19","doi-asserted-by":"crossref","unstructured":"Hajri, I., Goknil, A., Briand, L.C., Stephany, T.: PUMConf: a tool to configure product specific use case and domain models in a product line. In: Proceedings of the 24th ACM SIGSOFT International Symposium on Foundations of Software Engineering (FSE\u201916), pp. 1008\u20131012 (2016)","DOI":"10.1145\/2950290.2983935"},{"issue":"3","key":"935_CR20","doi-asserted-by":"publisher","first-page":"939","DOI":"10.1007\/s10270-016-0539-8","volume":"17","author":"I Hajri","year":"2018","unstructured":"Hajri, I., G\u00f6knil, A., Briand, L.C., Stephany, T.: Configuring use case models in product families. Softw. Syst. Model. 17(3), 939\u2013971 (2018)","journal-title":"Softw. Syst. Model."},{"key":"935_CR21","doi-asserted-by":"crossref","unstructured":"Ingolfo, S., Siena, A., Mylopoulos, J.: N\u00f2mos 3: Reasoning about regulatory compliance of requirements. In: Proceedings of 22nd IEEE International Requirements Engineering Conference (RE\u201914), pp. 313\u2013314 (2014)","DOI":"10.1109\/RE.2014.6912273"},{"key":"935_CR22","unstructured":"Manning, C.D., Sch\u00fctze, H.: Foundations of Statistical Natural Language Processing. MIT Press (2001)"},{"key":"935_CR23","unstructured":"OMG: Object Constraint Language - Version 2.4 (2017). https:\/\/www.omg.org\/spec\/OCL\/2.4\/PDF"},{"key":"935_CR24","unstructured":"OMG: Unified Modeling Language - Superstructure Version 2.5.1 (2017). https:\/\/www.omg.org\/spec\/UML\/2.5.1\/PDF"},{"issue":"5","key":"935_CR25","doi-asserted-by":"publisher","first-page":"836","DOI":"10.1016\/j.infsof.2012.11.009","volume":"55","author":"RK Panesar-Walawege","year":"2013","unstructured":"Panesar-Walawege, R.K., Sabetzadeh, M., Briand, L.C.: Supporting the verification of compliance to safety standards via model-driven engineering: approach, tool-support and empirical validation. Inf. Softw. Technol. 55(5), 836\u2013864 (2013)","journal-title":"Inf. Softw. Technol."},{"key":"935_CR26","doi-asserted-by":"crossref","unstructured":"Pullonen, P., Tom, J., Matulevicius, R., Toots, A.: Privacy-enhanced BPMN: enabling data privacy analysis in business processes models. Softw. Syst. Model. pp. 1\u201330 (2019)","DOI":"10.1007\/s10270-019-00718-z"},{"key":"935_CR27","doi-asserted-by":"publisher","first-page":"124","DOI":"10.1007\/978-3-030-44429-7_9","volume-title":"Requirements Engineering: Foundation for Software Quality","author":"A Rabinia","year":"2020","unstructured":"Rabinia, A., Ghanavati, S., Humphreys, L., Hahmann, T.: A methodology for implementing the formal legal-grl framework: a research preview. In: Madhavji, N., Pasquale, L., Ferrari, A., Gnesi, S. (eds.) Requirements Engineering: Foundation for Software Quality, pp. 124\u2013131. Springer International Publishing, Cham (2020)"},{"key":"935_CR28","doi-asserted-by":"crossref","unstructured":"Ranise, S., Siswantoro, H.: Automated legal compliance checking by security policy analysis. In: Computer Safety, Reliability, and Security (SAFECOMP\u201917 Workshops), pp. 361\u2013372 (2017)","DOI":"10.1007\/978-3-319-66284-8_30"},{"issue":"2","key":"935_CR29","doi-asserted-by":"publisher","first-page":"215","DOI":"10.1007\/s00766-015-0241-3","volume":"22","author":"N Sannier","year":"2017","unstructured":"Sannier, N., Adedjouma, M., Sabetzadeh, M., Briand, L.C.: An automated framework for detection and resolution of cross references in legal texts. Requir. Eng. 22(2), 215\u2013237 (2017)","journal-title":"Requir. Eng."},{"issue":"4","key":"935_CR30","doi-asserted-by":"publisher","first-page":"603","DOI":"10.1006\/ijhc.1994.1029","volume":"40","author":"SB Shum","year":"1994","unstructured":"Shum, S.B., Hammond, N.: Argumentation-based design rationale: what use at what cost? Int. J. Hum.-Comput. Stud. 40(4), 603\u2013652 (1994)","journal-title":"Int. J. Hum.-Comput. Stud."},{"key":"935_CR31","unstructured":"Sing, E.: A meta-model driven method for establishing business process compliance to gdpr. Master\u2019s thesis, University of Tartu (2019)"},{"key":"935_CR32","doi-asserted-by":"crossref","unstructured":"Sleimi, A., Sannier, N., Sabetzadeh, M., Briand, L.C., Dann, J.: Automated extraction of semantic legal metadata using natural language processing. In: Proceedings of 26th IEEE International Requirements Engineering Conference (RE\u201918), pp. 124\u2013135 (2018)","DOI":"10.1109\/RE.2018.00022"},{"key":"935_CR33","doi-asserted-by":"crossref","unstructured":"Soltana, G., Fourneret, E., Adedjouma, M., Sabetzadeh, M., Briand, L.C.: Using UML for modeling procedural legal rules: Approach and a study of luxembourg\u2019s tax law. In: Dingel, J., Schulte, W., Ramos, I., Abrah\u00e3o, E.\u00a0Insfr\u00e1n (eds.) Model-Driven Engineering Languages and Systems - 17th International Conference, MODELS 2014, Valencia, Spain, September 28 - October 3, 2014. Proceedings, Lecture Notes in Computer Science, vol. 8767, pp. 450\u2013466. Springer (2014)","DOI":"10.1007\/978-3-319-11653-2_28"},{"key":"935_CR34","unstructured":"Soltana, G., Sabetzadeh, M., Briand, L.C.: Practical model-driven data generation for system testing. arXiv preprint (arXiv:1902.00397) (2019). https:\/\/arxiv.org\/pdf\/1902.00397.pdf"},{"issue":"3","key":"935_CR35","doi-asserted-by":"publisher","first-page":"851","DOI":"10.1007\/s10270-016-0542-0","volume":"17","author":"G Soltana","year":"2018","unstructured":"Soltana, G., Sannier, N., Sabetzadeh, M., Briand, L.C.: Model-based simulation of legal policies: framework, tool support, and validation. Softw. Syst. Model. 17(3), 851\u2013883 (2018)","journal-title":"Softw. Syst. Model."},{"key":"935_CR36","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1016\/S1353-4858(16)30056-3","volume":"6","author":"C Tankard","year":"2016","unstructured":"Tankard, C.: What the GDPR means for businesses. Netw. Secur. 6, 5\u20138 (2016)","journal-title":"Netw. Secur."},{"key":"935_CR37","doi-asserted-by":"crossref","unstructured":"Tom, J., Sing, E., Matulevi\u010dius, R.: Conceptual representation of the GDPR: model and application directions. In: Perspectives in Business Informatics Research, pp. 18\u201328 (2018)","DOI":"10.1007\/978-3-319-99951-7_2"},{"key":"935_CR38","doi-asserted-by":"crossref","unstructured":"Torre, D., Abualhaija, S., Sabetzadeh, M., Briand, L.C., Baetens, K., Goes, P., Forastie, S.: An AI-assisted approach for checking the completeness of privacy policies against GDPR. In: Proceedings of 28th IEEE International Conference on Requirements Engineering (RE\u201920) (2020)","DOI":"10.1109\/RE48521.2020.00025"},{"key":"935_CR39","doi-asserted-by":"publisher","unstructured":"Torre, D., Alferez, M., Soltana, G., Sabetzadeh, M., Briand, L.: Model Driven Engineering for Data Protection and Privacy: Application and Experience with GDPR - Appendix (2021). https:\/\/doi.org\/10.5281\/zenodo.4564856","DOI":"10.5281\/zenodo.4564856"},{"key":"935_CR40","doi-asserted-by":"publisher","first-page":"121","DOI":"10.1016\/j.jss.2018.06.029","volume":"144","author":"D Torre","year":"2018","unstructured":"Torre, D., Labiche, Y., Genero, M., Elaasar, M.: A systematic identification of consistency rules for UML diagrams. J. Syst. Softw. 144, 121\u2013142 (2018)","journal-title":"J. Syst. Softw."},{"key":"935_CR41","doi-asserted-by":"crossref","unstructured":"Torre, D., Soltana, G., Sabetzadeh, M., Briand, L.C., Auffinger, Y., Goes, P.: Using models to enable compliance checking against the GDPR: an experience report. In: 22nd ACM\/IEEE International Conference on Model Driven Engineering Languages and Systems, MODELS 2019, Munich, Germany, September 15-20, 2019, pp. 1\u201311 (2019)","DOI":"10.1109\/MODELS.2019.00-20"},{"key":"935_CR42","unstructured":"van Lamsweerde, A.: Requirements Engineering - From System Goals to UML Models to Software Specifications. Wiley (2009)"},{"issue":"1","key":"935_CR43","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s00766-013-0181-8","volume":"20","author":"N Zeni","year":"2015","unstructured":"Zeni, N., Kiyavitskaya, N., Mich, L., Cordy, J.R., Mylopoulos, J.: GaiusT: supporting the extraction of rights and obligations for regulatory compliance. Requir. Eng. 20(1), 1\u201322 (2015)","journal-title":"Requir. Eng."}],"container-title":["Software and Systems Modeling"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10270-021-00935-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10270-021-00935-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10270-021-00935-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,1,15]],"date-time":"2023-01-15T18:14:48Z","timestamp":1673806488000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10270-021-00935-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,11,17]]},"references-count":43,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2021,12]]}},"alternative-id":["935"],"URL":"https:\/\/doi.org\/10.1007\/s10270-021-00935-5","relation":{},"ISSN":["1619-1366","1619-1374"],"issn-type":[{"value":"1619-1366","type":"print"},{"value":"1619-1374","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,11,17]]},"assertion":[{"value":"2 July 2020","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"27 September 2021","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"30 September 2021","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"17 November 2021","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}