{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T16:38:01Z","timestamp":1784392681942,"version":"3.55.0"},"reference-count":54,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100023561","name":"Ministerio de Universidades","doi-asserted-by":"publisher","award":["PRX22\/00280"],"award-info":[{"award-number":["PRX22\/00280"]}],"id":[{"id":"10.13039\/501100023561","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004837","name":"Ministerio de Ciencia e Innovaci?n","doi-asserted-by":"publisher","award":["TED2021-130455A-I00"],"award-info":[{"award-number":["TED2021-130455A-I00"]}],"id":[{"id":"10.13039\/501100004837","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/access.2024.3349425","type":"journal-article","created":{"date-parts":[[2024,1,3]],"date-time":"2024-01-03T19:51:35Z","timestamp":1704311495000},"page":"5256-5269","source":"Crossref","is-referenced-by-count":10,"title":["Sharing is Not Always Caring: Delving Into Personal Data Transfer Compliance in Android Apps"],"prefix":"10.1109","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0911-4608","authenticated-orcid":false,"given":"David","family":"Rodriguez","sequence":"first","affiliation":[{"name":"ETSI Telecomunicación, Universidad Politécnica de Madrid, Madrid, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6513-0303","authenticated-orcid":false,"given":"Jose M.","family":"Del Alamo","sequence":"additional","affiliation":[{"name":"ETSI Telecomunicación, Universidad Politécnica de Madrid, Madrid, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0642-2058","authenticated-orcid":false,"given":"Celia","family":"Fern\u00e1ndez-Aller","sequence":"additional","affiliation":[{"name":"ETSI Sistemas Informáticos, Universidad Politécnica de Madrid, Madrid, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4829-5533","authenticated-orcid":false,"given":"Norman","family":"Sadeh","sequence":"additional","affiliation":[{"name":"School of Computer Science, Carnegie Mellon University, Pittsburgh, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"EUR-Lex\u201432016R0679-EN","year":"2016"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.2501\/ijmr-2017-050"},{"key":"ref3","first-page":"1","volume-title":"The EU\u2019s Data Strategy from a Multifaceted Perspective. Views from Southern Europe","year":"2023"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1080\/13600834.2019.1573501"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2771783.2771795"},{"key":"ref6","volume-title":"Guidelines on Transparency Under Regulation 2016\/679 (wp260rev.01)","year":"2018"},{"key":"ref7","volume-title":"Guidelines 01\/2022 on Data Subject Rights\u2014Right of Access","year":"2023"},{"key":"ref8","volume-title":"Data Protection Act 2018. Enforcement Powers of the Information Commissioner","year":"2020"},{"key":"ref9","volume-title":"Judgment of the Court (First Chamber) of 12 January 2023. RW v \u00d6sterreichische Post AG\u2014Case C-154\/21","year":"2023"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/s00607-022-01076-3"},{"key":"ref11","first-page":"1","article-title":"Static analysis for GDPR compliance","volume-title":"Proc. Italian Conf. Cybersecur.","volume":"2058","author":"Ferrara"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-23597-0_11"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2872427.2883028"},{"key":"ref14","first-page":"3544","article-title":"Exposing the invisible web: An analysis of third-party http requests on 1 million websites","volume":"9","author":"Libert","year":"2015","journal-title":"Int. J. Commun."},{"key":"ref15","article-title":"A study of third-party tracking by mobile apps in the wild","author":"Han","year":"2012"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3176246"},{"key":"ref17","article-title":"Tracking the trackers: Towards understanding the mobile advertising and tracking ecosystem","author":"Vallina-Rodriguez","year":"2016","journal-title":"arXiv:1609.07190"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/s00607-023-01209-2"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2627393.2627404"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/saner.2016.52"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978333"},{"key":"ref22","first-page":"653","article-title":"LibRadar: Fast and accurate detection of third-party libraries in Android apps","volume-title":"Proc. IEEE\/ACM 38th Int. Conf. Softw. Eng. Companion (ICSE-C)","author":"Ma"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3293882.3330563"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2019.03.014"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/mobisecserv50855.2022.9727217"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/cac57257.2022.10054907"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3411497.3420216"},{"key":"ref28","article-title":"Testing the reliability of ChatGPT for text annotation and classification: A cautionary remark","author":"Reiss","year":"2023","journal-title":"arXiv:2304.11085"},{"key":"ref29","article-title":"ChatGPT-4 outperforms experts and crowd workers in annotating political Twitter messages with zero-shot learning","author":"T\u00f6rnberg","year":"2023","journal-title":"arXiv:2304.06588"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.2305016120"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.4335905"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/2470654.2466466"},{"key":"ref33","volume-title":"App Privacy Details\u2014App Store","year":"2023"},{"key":"ref34","volume-title":"Google Play\u2019s Data Safety section","year":"2023"},{"key":"ref35","article-title":"Unpacking privacy labels: A measurement and developer perspective on Google\u2019s data safety section","author":"Khandelwal","year":"2023","journal-title":"arXiv:2306.08111"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/eurospw59978.2023.00022"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/eurospw59978.2023.00016"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23009"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/icse48619.2023.00050"},{"key":"ref40","first-page":"985","article-title":"Actions speak louder than words: Entity-sensitive privacy policy and data flow analysis with POLICHECK","volume-title":"Proc. 29th USENIX Secur. Symp. (USENIX Security)","author":"Andow"},{"key":"ref41","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103262","article-title":"Automated GDPR compliance assessment for cross-border personal data transfers in Android applications","volume":"130","author":"Guam\u00e1n","year":"2023","journal-title":"Comput. Secur."},{"key":"ref42","article-title":"Explosion\/spaCy: V3.6.1: Support for Pydantic v2, find-function CLI and more","author":"Montani","journal-title":"Zenodo"},{"key":"ref43","volume-title":"Crunchbase","year":"2023"},{"key":"ref44","volume-title":"A World-Class Dynamic Instrumentation Framework","year":"2023"},{"key":"ref45","volume-title":"Okhttp","author":"Square","year":"2019"},{"key":"ref46","volume-title":"MyTracker Android SDK","year":"2023"},{"key":"ref47","volume-title":"Google Play SDK Index"},{"key":"ref48","volume-title":"Maven Repository","year":"2023"},{"issue":"3","key":"ref49","doi-asserted-by":"crossref","first-page":"267","DOI":"10.69554\/FRKJ2284","article-title":"Privacy nutrition labels, app store and the GDPR: Unintended consequences?","volume":"5","author":"Novovi\u0107","year":"2022","journal-title":"J. Data Protection Privacy"},{"key":"ref50","volume-title":"Article29\u2014Transparency Guidelines","author":"Commission","year":"2018"},{"key":"ref51","volume-title":"UI\/Application Exerciser Monkey","year":"2023"},{"key":"ref52","first-page":"34","article-title":"On the effectiveness of random testing for Android: Or how I learned to stop worrying and love the monkey","volume-title":"Proc. IEEE\/ACM 13th Int. Workshop Autom. Softw. Test (AST)","author":"Patel"},{"key":"ref53","volume-title":"Binding Decision 4\/2022 on the Dispute Submitted by the Irish SA on Meta Platforms Ireland Limited and its Instagram Service (Art. 65 GDPR)"},{"key":"ref54","first-page":"181","article-title":"A Fait Accompli? An empirical study into the absence of consent to third-party tracking in Android apps","volume-title":"Proc. 17th USENIX Conf. Usable Privacy Secur. (SOUPS)","author":"Kollnig"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10380310\/10379677.pdf?arnumber=10379677","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,7]],"date-time":"2024-11-07T10:36:59Z","timestamp":1730975819000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10379677\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":54,"URL":"https:\/\/doi.org\/10.1109\/access.2024.3349425","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]}}}