{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,6]],"date-time":"2026-03-06T23:03:00Z","timestamp":1772838180901,"version":"3.50.1"},"reference-count":125,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"Coordination for the Improvement of Higher Education Personnel - CAPES","award":["52005220"],"award-info":[{"award-number":["52005220"]}]},{"name":"Coordination for the Improvement of Higher Education Personnel - CAPES","award":["51775543"],"award-info":[{"award-number":["51775543"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/access.2024.3406724","type":"journal-article","created":{"date-parts":[[2024,5,28]],"date-time":"2024-05-28T18:15:49Z","timestamp":1716920149000},"page":"81608-81630","source":"Crossref","is-referenced-by-count":25,"title":["Challenges and Enablers for GDPR Compliance: Systematic Literature Review and Future Research Directions"],"prefix":"10.1109","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3244-4012","authenticated-orcid":false,"given":"Nemer Alberto","family":"Zaguir","sequence":"first","affiliation":[{"name":"Department of Production Engineering, University of São Paulo, São Paulo, Brazil"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7867-2523","authenticated-orcid":false,"given":"Guilherme Henrique","family":"de Magalh\u00e3es","sequence":"additional","affiliation":[{"name":"Department of Production Engineering, University of São Paulo, São Paulo, Brazil"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5147-9395","authenticated-orcid":false,"given":"Mauro","family":"de Mesquita Spinola","sequence":"additional","affiliation":[{"name":"Department of Production Engineering, University of São Paulo, São Paulo, Brazil"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.2307\/1321160"},{"key":"ref2","year":"1948","journal-title":"Universal Declaration of Human Rights"},{"key":"ref3","first-page":"679","volume-title":"Regulation (EU) 2016\/679 of the European Parliament and of the Council","author":"Regulation","year":"2016"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijinfomgt.2020.102225"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-019-0217-0"},{"key":"ref6","volume-title":"The Digital Matrix: New Rules for Business Transformation through Technology","author":"Venkatraman","year":"2017"},{"key":"ref7","first-page":"1","article-title":"Towards dealing with GDPR uncertainty","volume-title":"Proc. 11th IFIP Summer School Privacy Identity Manag.","author":"Agarwal"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1093\/cybsec\/tyy001"},{"key":"ref9","article-title":"The critical success factors of GDPR implementation: A Delphi study","volume-title":"Information Systems Development: Crossing Boundaries between Development and Operations (DevOps)","author":"Teixeira","year":"2021"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1108\/DPRG-01-2019-0007"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2950872"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3069877"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2020.100179"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.5465\/AMBPP.2021.12506abstract"},{"key":"ref15","volume-title":"Global Data Privacy Laws 2023: 162 National Laws and 20 Bills","author":"Greeleaf","year":"2023"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-57959-7"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2017.05.015"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.20897\/jisem\/3941"},{"key":"ref19","first-page":"29","article-title":"The General Data Protection Regulation (GDPR), emerging technologies and UK organisations: Awareness, implementation and readiness","volume-title":"Proc. UK Acad. Inf. Syst. Conf.","author":"Addis"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.33107\/ijbte.2018.6.3.07"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/s1353-4858(18)30057-6"},{"issue":"3","key":"ref22","doi-asserted-by":"crossref","first-page":"241","DOI":"10.13052\/jmbmit2245-456X.434","article-title":"GDPR regulation impact on different Bus. Models and businesses","volume":"4","author":"Lindgren","year":"2018","journal-title":"J. Multi Bus. Model Innov. Technol."},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2018.10.081"},{"issue":"2","key":"ref24","first-page":"785","article-title":"Some economic consequences of the GDPR","volume":"39","author":"Allen","year":"2018","journal-title":"SSRN Electron. J."},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.inteco.2015.11.001"},{"issue":"2","key":"ref26","first-page":"8","article-title":"Analyzing the past to prepare for the future: Writing a literature review","volume":"26","author":"Webster","year":"2002","journal-title":"MIS Quart."},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.28945\/479"},{"key":"ref28","volume-title":"Guidelines for Performing Systematic Literature Reviews in Software Engineering","author":"Kitchenham","year":"2007"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2915970.2916013"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2601248.2601268"},{"key":"ref31","doi-asserted-by":"crossref","DOI":"10.1016\/j.elerap.2019.100833","article-title":"Fintechs: A literature review and research agenda","volume":"34","author":"Milian","year":"2019","journal-title":"Electron. Commerce Res. Appl."},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.3390\/info14020114"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.21552\/edpl\/2020\/2\/7"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1108\/ICS-01-2020-0004"},{"key":"ref35","first-page":"1","article-title":"Developing an integrated ISO 27701 and GDPR based information privacy compliance requirements model","volume-title":"Proc. Australas. Conf. Inf. Syst.","author":"Anwar"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2019.2937756"},{"key":"ref37","volume-title":"GDPR and Cyber Security for Business Information Systems","author":"Gobeo","year":"2022"},{"key":"ref38","first-page":"1","article-title":"Data privacy compliance using COBIT 2019 and development of MISAM audit caselet","author":"Dharni","year":"2020"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1111\/rego.12401"},{"key":"ref40","article-title":"Information governance: Enablers and inhibitors for organizational adoption","author":"Assis","year":"2018"},{"key":"ref41","volume-title":"CGOC information governance benchmark survey report","year":"2018"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.24251\/HICSS.2019.729"},{"key":"ref43","first-page":"1","article-title":"Organizational factors influencing enterprise architecture management challenges","volume-title":"Proc. 21st Eur. Conf. Inf. Syst. (ECIS)","author":"Hauder"},{"key":"ref44","first-page":"1","article-title":"Information governance framework: The defense manufacturing case study","volume-title":"Proc. 19th Americas Conf. Inf. Syst.","author":"Lajara"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.24251\/HICSS.2020.688"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/EDOC.2019.00021"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-57646-5_12"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1093\/gigascience\/giz140"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1108\/DPRG-05-2019-0039"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3389685"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1108\/ICS-01-2020-0009"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1108\/IJPPM-07-2022-0345"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1108\/DPRG-03-2021-0041"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.2753\/mis0742-1222300306"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.18267\/j.cebr.214"},{"key":"ref56","first-page":"300","volume-title":"COBIT 2019 Framework: Governance and Management Objectives","year":"2018"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1093\/bmb\/ldy038"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2020.105412"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.3332\/ecancer.2017.709"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2017.11.004"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1080\/13600834.2017.1321096"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1287\/mnsc.2021.4054"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3558766"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-02302-7_15"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/3490754"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1016\/j.jlamp.2022.100789"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.3389\/fmed.2022.906448"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1186\/s12967-020-02457-y"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.3390\/healthcare11040496"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2988566"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1093\/ijlit\/eay017"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1080\/0144929X.2022.2074894"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1093\/idpl\/ipy002"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1017\/S1472669618000178"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.21552\/edpl\/2019\/4\/12"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.21552\/edpl\/2020\/1\/14"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.3846\/jbem.2021.15095"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-022-00391-7"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1007\/s10796-019-09974-2"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.14763\/2023.1.1686"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1017\/glj.2022.30"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.3390\/fi12050093"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.3390\/fi14110315"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2019.105342"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2017.12.003"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1017\/err.2018.47"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.21552\/edpl\/2020\/2\/6"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1016\/j.imu.2020.100361"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/TEM.2020.3015222"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(18)30085-X"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1093\/idpl\/ipx020"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1055\/s-0041-1726512"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1007\/s13740-020-00116-5"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1016\/j.techfore.2019.119743"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.3390\/info12090358"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2018.02.002"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2968741"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2019.103408"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2934226"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.25046\/aj030201"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.3390\/s20113046"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1155\/2019\/1431578"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.10.024"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2022.105765"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1007\/s10506-017-9206-9"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3124332"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1007\/s10844-023-00782-4"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2018.01.004"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1007\/s00146-022-01424-z"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2019.01.003"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3062201"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3000662"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1590\/S0103-65132007000100015"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2948287"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2017.10.003"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1080\/1097198x.2019.1569186"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.3390\/app9152953"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1016\/j.ipm.2021.102511"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1108\/RMJ-12-2018-0045"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1287\/mksc.2021.1339"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1007\/s11036-020-01646-9"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.54648\/EULR2020020"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1177\/02683962221141456"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.21552\/edpl\/2019\/3\/19"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.5937\/StraMan2200033F"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10380310\/10540423.pdf?arnumber=10540423","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,8,7]],"date-time":"2024-08-07T07:05:31Z","timestamp":1723014331000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10540423\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":125,"URL":"https:\/\/doi.org\/10.1109\/access.2024.3406724","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]}}}