{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T06:06:28Z","timestamp":1784009188815,"version":"3.55.0"},"reference-count":15,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T00:00:00Z","timestamp":1783987200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T00:00:00Z","timestamp":1783987200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/100012996","name":"University of Cyprus","doi-asserted-by":"crossref","id":[{"id":"10.13039\/100012996","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["SN COMPUT. SCI."],"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>Personal data collection in web applications should follow mandated legislative frameworks such as the EU General Data Protection Regulation (GDPR) principles. Among others, web data collection forms should provide clear and transparent explanations regarding the purposes of the collection. At the same time, for users\u2019 ease, such forms should follow standard usability principles. There have been works studying the merging of usability principles and privacy standards. Building on this line of work, we exploit the usable privacy heuristics, in combination with a set of relevant GDPR principles and the current website landscape, to create a user-centred design for transparent, usable, and GDPR-aware web forms through high-fidelity prototypes. We developed and validated a purposes dataset, both in human-readable and machine-readable formats. Finally, we developed a tool to assist web engineers in creating such forms and integrating them into their websites. We present an evaluation of the tool, demonstrating overall positive results and highlighting the potential of our approach to improve transparency at the point of data collection.<\/jats:p>","DOI":"10.1007\/s42979-026-05219-7","type":"journal-article","created":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T05:52:44Z","timestamp":1784008364000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Automating the Design and Development of Usable, GDPR-Aware Web Forms"],"prefix":"10.1007","volume":"7","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1958-5574","authenticated-orcid":false,"given":"Evangelia","family":"Vanezi","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Anna","family":"Vasileiou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"George A.","family":"Papadopoulos","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,7,14]]},"reference":[{"key":"5219_CR1","unstructured":"Parliament E, European Union C. General Data Protection Regulation. Off J Eur Union. 2015."},{"key":"5219_CR2","first-page":"485","volume":"11","author":"JR Reidenberg","year":"2015","unstructured":"Reidenberg JR, Russell NC, Callen AJ, Qasir S, Norton TB. Privacy harms and the effectiveness of the notice and choice framework. ISJLP. 2015;11:485.","journal-title":"ISJLP"},{"key":"5219_CR3","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2022.111545","volume":"195","author":"W Brunotte","year":"2023","unstructured":"Brunotte W, Specht A, Chazette L, Schneider K. Privacy explanations\u2014a means to end-user trust. J Syst Softw. 2023;195:111545.","journal-title":"J Syst Softw"},{"key":"5219_CR4","doi-asserted-by":"crossref","unstructured":"Salgado ADL, Hung PC, Fortes RP. Six usable privacy heuristics. In: Proceedings of the XXII Brazilian symposium on human factors in computing systems. 2023. p. 1\u201311.","DOI":"10.1145\/3638067.3638111"},{"key":"5219_CR5","doi-asserted-by":"crossref","unstructured":"Brunotte W, Chazette L, Kohler L, Klunder J, Schneider K. What about my privacy? Helping users understand online privacy policies. In: Proceedings of the international conference on software and system processes and international conference on global software engineering. 2022. p. 56\u201365.","DOI":"10.1145\/3529320.3529327"},{"issue":"3","key":"5219_CR6","doi-asserted-by":"publisher","first-page":"70","DOI":"10.1109\/MIC.2017.75","volume":"21","author":"F Schaub","year":"2017","unstructured":"Schaub F, Balebako R, Cranor LF. Designing effective privacy notices and controls. IEEE Internet Comput. 2017;21(3):70\u20137.","journal-title":"IEEE Internet Comput"},{"key":"5219_CR7","unstructured":"Harkous H, Fawaz K, Lebret R, Schaub F, Shin KG, Aberer K. Polisis: automated analysis and presentation of privacy policies using deep learning. In: 27th USENIX security symposium (USENIX Security 18). 2018. p. 531\u201348."},{"key":"5219_CR8","unstructured":"Harkous H, Fawaz K, Shin KG, Aberer K. $$\\{$$PriBots$$\\}$$: Conversational privacy with chatbots. In: Twelfth symposium on usable privacy and security (SOUPS 2016). 2016."},{"key":"5219_CR9","doi-asserted-by":"crossref","unstructured":"Freiberger V, Fleig A, Buchmann E. Helping Johnny make sense of privacy policies with LLMs. In: Proceedings of the 2026 CHI conference on human factors in computing systems. 2026. p. 1\u201321.","DOI":"10.1145\/3772318.3791465"},{"key":"5219_CR10","doi-asserted-by":"crossref","unstructured":"Vanezi E, Kallenou A, Papadopoulos GA. Saving the day for users in web platforms: a chatbot-based solution for privacy. In: 2023 10th International conference on behavioural and social computing (BESC). IEEE; 2023. p. 1\u20137.","DOI":"10.1109\/BESC59560.2023.10386087"},{"key":"5219_CR11","doi-asserted-by":"crossref","unstructured":"Nielsen J. Enhancing the explanatory power of usability heuristics. In: Proceedings of the SIGCHI conference on human factors in computing systems. 1994. p. 152\u20138.","DOI":"10.1145\/191666.191729"},{"key":"5219_CR12","doi-asserted-by":"crossref","unstructured":"Bailly H, Papanna A, Brennan R. Prototyping an end-user user interface for the solid application interoperability specification under GDPR. In: European semantic web conference. Springer; 2023. p. 557\u201373.","DOI":"10.1007\/978-3-031-33455-9_33"},{"issue":"4","key":"5219_CR13","first-page":"40","volume":"4","author":"M Schrepp","year":"2017","unstructured":"Schrepp M, Hinderks A, Thomaschewski J. Construction of a benchmark for the user experience questionnaire (UEQ). Int J Interact Multimedia Artif Intell. 2017;4(4):40\u20134.","journal-title":"Int J Interact Multimedia Artif Intell"},{"issue":"2","key":"5219_CR14","doi-asserted-by":"publisher","first-page":"77","DOI":"10.1191\/1478088706qp063oa","volume":"3","author":"V Braun","year":"2006","unstructured":"Braun V, Clarke V. Using thematic analysis in psychology. Qual Res Psychol. 2006;3(2):77\u2013101.","journal-title":"Qual Res Psychol"},{"key":"5219_CR15","doi-asserted-by":"crossref","unstructured":"Braun V, Clarke V. Thematic analysis: a practical guide. 2021.","DOI":"10.4135\/9781036232078.n9"}],"container-title":["SN Computer Science"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s42979-026-05219-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s42979-026-05219-7","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s42979-026-05219-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T05:52:47Z","timestamp":1784008367000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s42979-026-05219-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7,14]]},"references-count":15,"journal-issue":{"issue":"6","published-online":{"date-parts":[[2026,8]]}},"alternative-id":["5219"],"URL":"https:\/\/doi.org\/10.1007\/s42979-026-05219-7","relation":{},"ISSN":["2661-8907"],"issn-type":[{"value":"2661-8907","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7,14]]},"assertion":[{"value":"15 January 2026","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 July 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 July 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval"}},{"value":"Not applicable.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Informed consent"}}],"article-number":"639"}}