{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,13]],"date-time":"2026-06-13T07:06:28Z","timestamp":1781334388759,"version":"3.54.1"},"reference-count":32,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2025,6,7]],"date-time":"2025-06-07T00:00:00Z","timestamp":1749254400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,6,7]],"date-time":"2025-06-07T00:00:00Z","timestamp":1749254400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Empir Software Eng"],"published-print":{"date-parts":[[2025,9]]},"DOI":"10.1007\/s10664-025-10681-7","type":"journal-article","created":{"date-parts":[[2025,6,7]],"date-time":"2025-06-07T03:29:59Z","timestamp":1749266999000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Experimental Evaluation of a Checklist-Based Inspection Technique to Verify the Compliance of Software Systems with the Brazilian General Data Protection Law"],"prefix":"10.1007","volume":"30","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4861-3394","authenticated-orcid":false,"given":"Diego Andr\u00e9","family":"Cerqueira","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9877-3946","authenticated-orcid":false,"given":"Rafael Maiani","family":"de Mello","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-5347-9789","authenticated-orcid":false,"given":"J\u00e9ssica Soares","family":"da Costa","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4258-0424","authenticated-orcid":false,"given":"Guilherme Horta","family":"Travassos","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,6,7]]},"reference":[{"key":"10681_CR1","doi-asserted-by":"publisher","unstructured":"Ara\u00fajo E, Vilela J, Silva C, Alves C (2021) Are My Business Process Models Compliant With LGPD? The LGPD4BP Method to Evaluate and to Model LGPD aware Business Processes. XVII Brazilian Symposium on Information Systems, pp 1\u20139. https:\/\/doi.org\/10.1145\/3466933.3466982","DOI":"10.1145\/3466933.3466982"},{"key":"10681_CR2","doi-asserted-by":"crossref","unstructured":"Barcelos RF, Travassos GH (2006) ArqCheck: Uma abordagem para inspe\u00e7\u00e3o de documentos arquiteturais baseada em checklist. Anais do V Simp\u00f3sio Brasileiro de Qualidade de Software (SBQS 2006), pp 174\u2013188","DOI":"10.5753\/sbqs.2006.15608"},{"key":"10681_CR3","unstructured":"VR Basili G Caldiera HD Rombach 1994 The goal question metric approach Encyclopedia of Software Engineering 2 528 532"},{"key":"10681_CR4","doi-asserted-by":"crossref","unstructured":"Boehm B, Basili VR (2001) Software Defect Reduction Top 10 List. Software engineering: Barry W. Boehm's lifetime contributions to software development, management, and research. John Wiley & Sons 34(1): 75","DOI":"10.1109\/2.962984"},{"key":"10681_CR5","unstructured":"Brasil (2018) LEI No 13.709, DE 14 DE AGOSTO DE 2018: Lei Geral de Prote\u00e7\u00e3o de Dados Pessoais (LGPD). http:\/\/www.planalto.gov.br\/ccivil_03\/_ato2015-2018\/2018\/lei\/L13709.htm. Accessed 13 Feb 2022"},{"key":"10681_CR6","unstructured":"A Cavoukian 2009 Privacy by Design - The 7 foundational principles Information and Privacy Commissioner of Ontario, Canada 5 12"},{"key":"10681_CR7","doi-asserted-by":"publisher","unstructured":"Cerqueira DA, de Mello RM, Travassos GH (2023) Um checklist para inspe\u00e7\u00e3o de privacidade e prote\u00e7\u00e3o de dados pessoais em artefatos de software. Proceedings of the XXVI Iberoamerican Congress on Software Engineering, SBC, pp 206\u2013213. https:\/\/doi.org\/10.5753\/cibse.2023","DOI":"10.5753\/cibse.2023"},{"key":"10681_CR8","doi-asserted-by":"crossref","unstructured":"Cerqueira DA (2024) LGPDCHECK: Inspe\u00e7\u00e3o de privacidade e prote\u00e7\u00e3o de dados pessoais em artefatos de software \u00e0 luz dos princ\u00edpios da Lei Geral de Prote\u00e7\u00e3o de Dados Pessoais (LGPD - 13.709\/2018). Dissertation, COPPE\/PESC, Universidade Federal do Rio de Janeiro.","DOI":"10.12957\/redp.2019.42138"},{"key":"10681_CR9","doi-asserted-by":"publisher","unstructured":"da Silva VM da, Travassos GH (2020) ScenarIoT: Support for Scenario Specification of Internet of Things-based Software Systems. Anais Estendidos do XI Congresso Brasileiro de Software: Teoria e Pr\u00e1tica (CBSoft 2020), pp 195\u2013209. https:\/\/doi.org\/10.5753\/cbsoft_estendido.2020","DOI":"10.5753\/cbsoft_estendido.2020"},{"key":"10681_CR10","doi-asserted-by":"publisher","first-page":"168","DOI":"10.1109\/SBES.2010.29","volume":"2010","author":"RM de Mello","year":"2010","unstructured":"de Mello RM, Pereira WM, Travassos GH (2010) Activity Diagram Inspection on Requirements Specification. Braz Symp Software Eng 2010:168\u2013177. https:\/\/doi.org\/10.1109\/SBES.2010.29","journal-title":"Braz Symp Software Eng"},{"issue":"5","key":"10681_CR11","doi-asserted-by":"publisher","first-page":"720","DOI":"10.3217\/jucs-020-05-0720","volume":"20","author":"RM de Mello","year":"2014","unstructured":"de Mello RM et al (2014) Verification of Software Product Line artifacts: A checklist to support feature model inspections. J Univ Comput Sci 20(5):720\u2013745. https:\/\/doi.org\/10.3217\/jucs-020-05-0720","journal-title":"J Univ Comput Sci"},{"key":"10681_CR12","doi-asserted-by":"publisher","first-page":"108","DOI":"10.1007\/978-3-319-45468-9_7","volume":"260","author":"RM de Mello","year":"2016","unstructured":"de Mello RM, Motta RC, Travassos GH (2016) A Checklist-Based Inspection Technique for Business Process Models. Lecture Notes in Business Information Processing 260:108\u2013123. https:\/\/doi.org\/10.1007\/978-3-319-45468-9_7","journal-title":"Lecture Notes in Business Information Processing"},{"key":"10681_CR13","doi-asserted-by":"crossref","unstructured":"de Mello RM, Massollar JL, Travassos GH (2011) T\u00e9cnica de Inspe\u00e7\u00e3o Baseada em Checklist para Identifica\u00e7\u00e3o de Defeitos em Diagramas de Atividades. Anais do X Simp\u00f3sio Brasileiro de Qualidade de Software (SBQS 2011) pp 119\u2013133","DOI":"10.5753\/sbqs.2011.15391"},{"issue":"4","key":"10681_CR14","doi-asserted-by":"publisher","first-page":"545","DOI":"10.1007\/s00766-022-00391-7","volume":"27","author":"E Dias","year":"2022","unstructured":"Dias E et al (2022) Guidelines adopted by agile teams in privacy requirements elicitation after the Brazilian general data protection law (LGPD) implementation. Requirements Eng 27(4):545\u2013567","journal-title":"Requirements Eng"},{"issue":"4","key":"10681_CR15","doi-asserted-by":"publisher","first-page":"2630","DOI":"10.1007\/s10664-020-09818-7","volume":"25","author":"E Engstr\u00f6m","year":"2020","unstructured":"Engstr\u00f6m E, Storey MA, Runeson P, H\u00f6st M, Baldassarre MT (2020) How software engineering research aligns with design science: a review. Empir Softw Eng 25(4):2630\u20132660. https:\/\/doi.org\/10.1007\/s10664-020-09818-7","journal-title":"Empir Softw Eng"},{"issue":"2","key":"10681_CR16","first-page":"258","volume":"38","author":"ME Fagan","year":"1976","unstructured":"Fagan ME (1976) Design and code inspections to reduce errors in program development. IBM Syst J 38(2):258\u2013287","journal-title":"IBM Syst J"},{"issue":"3","key":"10681_CR17","first-page":"25","volume":"14","author":"S G\u00fcrses","year":"2011","unstructured":"G\u00fcrses S, Troncoso C, Diaz C (2011) Engineering: Privacy by design. Computers, Privacy & Data Protection 14(3):25","journal-title":"Computers, Privacy & Data Protection"},{"key":"10681_CR18","doi-asserted-by":"publisher","first-page":"259","DOI":"10.1007\/s10664-017-9517-1","volume":"23","author":"I Hadar","year":"2018","unstructured":"Hadar I, Hasson T, Ayalon O et al (2018) Privacy by designers: software developers\u2019 privacy mindset. Empir Software Eng 23:259\u2013289","journal-title":"Empir Software Eng"},{"key":"10681_CR19","doi-asserted-by":"publisher","unstructured":"IEEE (2008) 1028\u20132008 - IEEE Standard for Software Reviews and Audits, IEEE, 1\u201353. https:\/\/doi.org\/10.1109\/IEEESTD.2008.4601584","DOI":"10.1109\/IEEESTD.2008.4601584"},{"issue":"5","key":"10681_CR20","doi-asserted-by":"publisher","first-page":"387","DOI":"10.1109\/32.922713","volume":"27","author":"O Laitenberger","year":"2001","unstructured":"Laitenberger O, El Emam K, Harbich TG (2001) An internally replicated quasi-experimental comparison of checklist and perspective-based reading of code documents. IEEE Trans Software Eng 27(5):387\u2013421. https:\/\/doi.org\/10.1109\/32.922713","journal-title":"IEEE Trans Software Eng"},{"key":"10681_CR21","doi-asserted-by":"crossref","unstructured":"Mafra SN, Travassos GH (2006) Leitura Baseada em Perspectiva: A Vis\u00e3o do Projetista Orientada a Objetos. Anais do V Simp\u00f3sio Brasileiro de Qualidade de Software (SBQS 2006), pp. 144\u2013158","DOI":"10.5753\/sbqs.2006.15606"},{"issue":"4","key":"10681_CR22","doi-asserted-by":"publisher","first-page":"251","DOI":"10.1016\/0167-9236(94)00041-2","volume":"15","author":"ST March","year":"1995","unstructured":"March ST, Smith GF (1995) Design and natural science research on information technology. Decis Support Syst 15(4):251\u2013266. https:\/\/doi.org\/10.1016\/0167-9236(94)00041-2","journal-title":"Decis Support Syst"},{"key":"10681_CR23","doi-asserted-by":"publisher","unstructured":"Mendes J, Viana D, Rivero L (2021) Developing an Inspection Checklist for the Adequacy Assessment of Software Systems to Quality Attributes of the Brazilian General Data Protection Law: An Initial Proposal. In: Brazilian Symposium on Software Engineering, pp 263\u2013268. https:\/\/doi.org\/10.1145\/3474624.3477069","DOI":"10.1145\/3474624.3477069"},{"issue":"1","key":"10681_CR24","doi-asserted-by":"publisher","first-page":"4","DOI":"10.19153\/cleiej.22.1.4","volume":"22","author":"ME Morales-Trujillo","year":"2019","unstructured":"Morales-Trujillo ME, Matla-Cruz EO, Garc\u00eda-Mireles GA, Piattini M (2019) A systematic mapping study of Privacy by Design. CLEI Electr J 22(1):4","journal-title":"CLEI Electr J"},{"issue":"1","key":"10681_CR25","doi-asserted-by":"publisher","first-page":"104","DOI":"10.1093\/jhuman\/huw027","volume":"9","author":"C Nyst","year":"2017","unstructured":"Nyst C, Falchetta T (2017) The right to privacy in the digital age. J Hum Rights Pract 9(1):104\u2013118. https:\/\/doi.org\/10.1093\/jhuman\/huw027","journal-title":"J Hum Rights Pract"},{"key":"10681_CR26","doi-asserted-by":"publisher","unstructured":"Pereira I, Mendes J, Viana D, Rivero L, Ferreira W, Soares S (2022) Extending an LGPD Compliance Inspection Checklist to Assess IoT Solutions: An Initial Proposal, Anais Estendidos do XIII Congresso Brasileiro de Software: Teoria e Pr\u00e1tica, SBC. 28\u201331. https:\/\/doi.org\/10.5753\/cbsoft_estendido.2022.226679","DOI":"10.5753\/cbsoft_estendido.2022.226679"},{"issue":"6","key":"10681_CR27","doi-asserted-by":"publisher","first-page":"563","DOI":"10.1109\/32.391380","volume":"21","author":"AA Porter","year":"1995","unstructured":"Porter AA, Votta LG, Basili VR (1995) Comparing detection methods for software requirements inspections: a replicated experiment. IEEE Trans Software Eng 21(6):563\u2013575. https:\/\/doi.org\/10.1109\/32.391380","journal-title":"IEEE Trans Software Eng"},{"key":"10681_CR28","doi-asserted-by":"publisher","unstructured":"Saraiva J, Souza C, Soares S (2024) Desafios de Compliance da LGPD: Implanta\u00e7\u00e3o na Ind\u00fastria de Software Brasileira. Anais do IX Workshop sobre Aspectos Sociais, Humanos e Econ\u00f4micos de Software, pp 193\u2013198. https:\/\/doi.org\/10.5753\/washes.2024.3079","DOI":"10.5753\/washes.2024.3079"},{"issue":"6","key":"10681_CR29","doi-asserted-by":"publisher","first-page":"27","DOI":"10.1145\/1743546.1743559","volume":"53","author":"SS Shapiro","year":"2010","unstructured":"Shapiro SS (2010) Privacy by design: Moving from Art to Practice. Commun ACM 53(6):27\u201329. https:\/\/doi.org\/10.1145\/1743546.1743559","journal-title":"Commun ACM"},{"issue":"7","key":"10681_CR30","doi-asserted-by":"publisher","first-page":"73","DOI":"10.1109\/2.869376","volume":"33","author":"F Shull","year":"2000","unstructured":"Shull F, Rus I, Basili V (2000) How perspective-based reading can improve requirements inspections. Computer 33(7):73\u201379. https:\/\/doi.org\/10.1109\/2.869376","journal-title":"Computer"},{"key":"10681_CR31","doi-asserted-by":"publisher","first-page":"47","DOI":"10.1145\/320384.320389","volume":"34","author":"G Travassos","year":"1999","unstructured":"Travassos G, Shull F, Fredericks M, Basili VR (1999) Detecting defects in object-oriented designs. SIGPLAN Not 34:47\u201356. https:\/\/doi.org\/10.1145\/320384.320389","journal-title":"SIGPLAN Not"},{"key":"10681_CR32","doi-asserted-by":"publisher","unstructured":"C W\u00f6hlin P Runeson M H\u00f6st MC Ohlsson B Regnell A Wesslen 2012 Experimentation in software engineering Springer Science & Business Media https:\/\/doi.org\/10.1007\/978-3-642-29044-2","DOI":"10.1007\/978-3-642-29044-2"}],"container-title":["Empirical Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-025-10681-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10664-025-10681-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-025-10681-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,13]],"date-time":"2025-09-13T08:55:28Z","timestamp":1757753728000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10664-025-10681-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,7]]},"references-count":32,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2025,9]]}},"alternative-id":["10681"],"URL":"https:\/\/doi.org\/10.1007\/s10664-025-10681-7","relation":{},"ISSN":["1382-3256","1573-7616"],"issn-type":[{"value":"1382-3256","type":"print"},{"value":"1573-7616","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,6,7]]},"assertion":[{"value":"27 May 2025","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"7 June 2025","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical Approval"}},{"value":"All the participants were informed and freely signed a consent form to participate in the research.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Informed Consent"}},{"value":"The authors declare no conflict of interest. Besides, they have no financial or non-financial interests directly or indirectly related to the work submitted for publication.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"Not applicable.","order":5,"name":"Ethics","group":{"name":"EthicsHeading","label":"Clinical Trial Number"}}],"article-number":"122"}}