{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,9]],"date-time":"2026-04-09T04:57:58Z","timestamp":1775710678804,"version":"3.50.1"},"reference-count":40,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,3,19]],"date-time":"2026-03-19T00:00:00Z","timestamp":1773878400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,19]],"date-time":"2026-03-19T00:00:00Z","timestamp":1773878400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,3,19]]},"DOI":"10.1109\/isdfs69419.2026.11458981","type":"proceedings-article","created":{"date-parts":[[2026,4,8]],"date-time":"2026-04-08T20:01:51Z","timestamp":1775678511000},"page":"1-6","source":"Crossref","is-referenced-by-count":0,"title":["Weak Enforcement and Low Compliance in PCI DSS: A Comparative Security Study"],"prefix":"10.1109","author":[{"given":"Soonwon","family":"Park","sequence":"first","affiliation":[{"name":"The Beacom College of Computer and Cyber Sciences, Dakota State University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"John D.","family":"Hastings","sequence":"additional","affiliation":[{"name":"The Beacom College of Computer and Cyber Sciences, Dakota State University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"2022 findings from the diary of consumer payment choice","year":"2022"},{"key":"ref2","volume-title":"2025 credit card fraud report and statistics","year":"2025"},{"key":"ref3","volume-title":"Evaluating the effectiveness of cyber security regulations","author":"Syed","year":"2023"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-4666-2050-6.ch012"},{"key":"ref5","article-title":"2024 payment security report","year":"2024","journal-title":"Verizon Business, Tech. Rep."},{"key":"ref6","volume-title":"Merchant processing","year":"2014"},{"key":"ref7","doi-asserted-by":"crossref","DOI":"10.2307\/jj.12011252","volume-title":"PCI DSS version 4.0: A guide to the payment card industry data security standard","author":"Hancock","year":"2024"},{"key":"ref8","volume-title":"Pci non-compliance fees: An expensive mistake","author":"Soroush","year":"2025"},{"key":"ref9","volume-title":"Counting the cost of pci dss non-compliance","author":"Salihagic","year":"2024"},{"key":"ref10","volume-title":"How ocr enforces the hipaa privacy & security rules, Government Document","year":"2023"},{"key":"ref11","first-page":"64815","article-title":"Annual civil monetary penalties inflation adjustment (august 8, 2024)","volume":"89","year":"2024","journal-title":"Fed. Reg."},{"key":"ref12","volume-title":"Summary of the hipaa privacy rule, Government Document","year":"2025"},{"key":"ref13","volume-title":"About physician discipline","year":"2025"},{"key":"ref14","volume-title":"Anthem pays ocr \\$16 million in record hipaa settlement, Government Document","year":"2018"},{"key":"ref15","volume-title":"Amount of a civil money penalty, 45 C.F.R. \u00a7 160.404, Government Document","year":"2009"},{"key":"ref16","article-title":"Annual report pursuant to section 13 or 15(d) of the securities exchange act of 1934 for the fiscal year ended december 31, 2018","year":"2018","journal-title":"U.S. Securities and Exchange Commission, Form 10-K"},{"key":"ref17","article-title":"Regulation (eu) no 526\/2013 concerning the european union agency for network and information security (enisa)","year":"2013","journal-title":"Official Journal of the European Union, Government Document"},{"key":"ref18","article-title":"Directive (eu) 2022\/2555 of the european parliament and of the council of 14 december 2022 on measures for a high common level of cybersecurity (nis 2 directive)","year":"2022","journal-title":"Legal Rule or Regulation"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.3332\/ecancer.2017.709"},{"key":"ref20","article-title":"Guidelines 9\/2022 on personal data breach notification under gdpr","year":"2023","journal-title":"EDPB, Tech. Rep."},{"key":"ref21","article-title":"Regulation (eu) 2016\/679","year":"2016","journal-title":"Government Document"},{"key":"ref22","article-title":"Data protection commission announces conclusion of inquiry into meta ireland\u2019s eu-us data transfers","year":"2023","journal-title":"Press release"},{"key":"ref23","article-title":"Annual report pursuant to section 13 or 15(d) of the securities exchange act of 1934 for the fiscal year ended december 31, 2023","year":"2024","journal-title":"U.S. Securities and Exchange Commission, Tech. Rep."},{"key":"ref24","article-title":"Lesson3: Measures of risk - section 2: Calculating rates","year":"2025","journal-title":"Principles of epidemiology in public health practice, Government Document"},{"key":"ref25","article-title":"Nis 2 update for europe (march 2025)","year":"2025","journal-title":"Noerr Insights"},{"key":"ref26","article-title":"Commission takes action to ensure complete and timely transposition of eu directives","year":"2024","journal-title":"Press release INF\/24\/5988"},{"key":"ref27","article-title":"Commission calls on 19 member states to fully transpose the nis2 directive","year":"2025","journal-title":"Press release"},{"key":"ref28","article-title":"The majority of businesses surveyed are failing to comply with gdpr, according to new talend research","year":"2018","journal-title":"Press release"},{"key":"ref29","article-title":"Gdpr compliance rate remains low according to new talend research","year":"2019","journal-title":"Press release"},{"key":"ref30","article-title":"Five years into gdpr: How eu companies balance compliance and effective marketing","year":"2023","journal-title":"Tech. Rep."},{"key":"ref31","article-title":"Harmonizing marketing and privacy: How eu organizations are developing their compliant digital marketing strategies","year":"2024","journal-title":"Tech. Rep."},{"key":"ref32","article-title":"7 avril 2019. - loi \u00e9tablissant un cadre pour la s\u00e9curit\u00e9 des r\u00e9seaux et des syst\u00e8mes d\u2019information d\u2019int\u00e9r\u00eat g\u00e9n\u00e9ral pour la s\u00e9curit\u00e9 publique","year":"2019","journal-title":"Government Document, [in French]"},{"key":"ref33","article-title":"7 april 2019. law establishing a framework for the security of network and information systems of general interest for public security","year":"2019","journal-title":"Government Document, unofficial English translation"},{"key":"ref34","article-title":"Resolution agreements","year":"2025","journal-title":"Government Document"},{"key":"ref35","article-title":"American Hospital Association","year":"2025","journal-title":"Fast facts on U.S. hospitals"},{"key":"ref36","article-title":"U.s. physician workforce data dashboard","year":"2023","journal-title":"Tech. Rep."},{"key":"ref37","article-title":"U.s. physician workforce data dashboard","year":"2024","journal-title":"Tech. Rep."},{"key":"ref38","article-title":"Business associate breaches","author":"Luoma","year":"2025","journal-title":"AHA Trustee Services"},{"key":"ref39","volume-title":"Statistics: Fines imposed over time","year":"2023"},{"key":"ref40","volume-title":"Breakdown of european companies by country","year":"2023"}],"event":{"name":"2026 14th International Symposium on Digital Forensics and Security (ISDFS)","location":"Boston, MA, USA","start":{"date-parts":[[2026,3,19]]},"end":{"date-parts":[[2026,3,20]]}},"container-title":["2026 14th International Symposium on Digital Forensics and Security (ISDFS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11458844\/11458909\/11458981.pdf?arnumber=11458981","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,9]],"date-time":"2026-04-09T04:36:40Z","timestamp":1775709400000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11458981\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,19]]},"references-count":40,"URL":"https:\/\/doi.org\/10.1109\/isdfs69419.2026.11458981","relation":{},"subject":[],"published":{"date-parts":[[2026,3,19]]}}}