{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T21:08:18Z","timestamp":1783976898102,"version":"3.55.0"},"reference-count":65,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62441227"],"award-info":[{"award-number":["62441227"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Key Research and Development Program of China","award":["2023YFB3106500"],"award-info":[{"award-number":["2023YFB3106500"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1109\/tdsc.2026.3677283","type":"journal-article","created":{"date-parts":[[2026,3,24]],"date-time":"2026-03-24T19:51:19Z","timestamp":1774381879000},"page":"7768-7782","source":"Crossref","is-referenced-by-count":0,"title":["A Comprehensive Study on GDPR-Oriented Analysis of Privacy Policies: Taxonomy, Corpus and GDPR Concept Classifiers"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6607-1280","authenticated-orcid":false,"given":"Peng","family":"Tang","sequence":"first","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xin","family":"Li","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-2576-7631","authenticated-orcid":false,"given":"Yuxin","family":"Chen","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6428-1655","authenticated-orcid":false,"given":"Weidong","family":"Qiu","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haochen","family":"Mei","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8940-798X","authenticated-orcid":false,"given":"Allison","family":"Holmes","sequence":"additional","affiliation":[{"name":"University of Birmingham, Birmingham, U.K."}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0638-5610","authenticated-orcid":false,"given":"Fenghua","family":"Li","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5628-7328","authenticated-orcid":false,"given":"Shujun","family":"Li","sequence":"additional","affiliation":[{"name":"University of Kent, Canterbury, U.K."}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"543","article-title":"The cost of reading privacy policies","volume-title":"J. Law Policy Inf. Soc.","volume":"4","author":"McDonald","year":"2008"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2016.2604383"},{"key":"ref3","article-title":"Google fined 57 m by data protection watchdog over GDPR violations","year":"2020"},{"key":"ref4","article-title":"Home | ICO"},{"key":"ref5","article-title":"Guide to the U.K. general data protection regulation (U.K. GDPR)","year":"2022"},{"key":"ref6","article-title":"Privacy policy template"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/re48521.2020.00025"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/p16-1126"},{"key":"ref9","first-page":"531","article-title":"Polisis: Automated analysis and presentation of privacy policies using deep learning","volume-title":"Proc. 27th USENIX Secur. Symp. USENIX Assoc.","author":"Harkous","year":"2018"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-66172-4_16"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58201-2_25"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.acl-long.532"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2021.3124332"},{"key":"ref14","article-title":"Automated detection of GDPR disclosure requirements in privacy policies using deep active learning","author":"Rahat","year":"2021"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/s10618-010-0175-9"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-73731-5_12"},{"key":"ref17","first-page":"24","article-title":"On the selection of negative examples for hierarchical text categorization","volume-title":"Proc. 3rd Lang. Technol. Conf.","author":"Fagni","year":"2007"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1504\/ijdmb.2010.032150"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3308560.3317585"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/d17-1294"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/d18-1387"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0037"},{"key":"ref23","first-page":"5688","article-title":"The DAPRECO knowledge base: Representing the GDPR in LegalRuleML","volume-title":"Proc. 12th Lang. Resour. Eval. Conf. Eur. Lang. Resour. Assoc.","author":"Robaldo","year":"2020"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-27947-9_13"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.3390\/s22051838"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690321"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3180445.3180447"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/s10506-019-09243-2"},{"key":"ref29","first-page":"1","article-title":"Evaluating privacy policies under modern privacy laws at scale: An LLM-based automated approach","volume-title":"Proc. 34th USENIX Secur. Symp. USENIX Assoc.","author":"Xie","year":"2025"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-99951-7_2"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.3233\/978-1-61499-935-5-101"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-019-00315-y"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-03667-6_17"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/models.2019.00-20"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3462757.3466081"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623067"},{"key":"ref37","first-page":"1","article-title":"Privee: An architecture for automatically analyzing web privacy policies","volume-title":"Proc. 23rd USENIX Secur. Symp. USENIX Assoc.","author":"Zimmeck","year":"2014"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-018-0305-2"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/s10270-019-00718-z"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/re.2018.00023"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24100"},{"key":"ref42","first-page":"1073","article-title":"POLICYCOMP: Counterpart comparison of privacy policies uncovers overbroad personal data collection practices","volume-title":"Proc. 32nd USENIX Secur. Symp. USENIX Assoc.","author":"Zhou","year":"2023"},{"key":"ref43","first-page":"3753","article-title":"PrivGuard: Privacy regulation compliance made easier","volume-title":"Proc. 31st USENIX Secur. Symp. USENIX Assoc.","author":"Wang","year":"2022"},{"key":"ref44","first-page":"1037","article-title":"PoliGraph: Automated privacy policy analysis using knowledge graphs","volume-title":"Proc. 32nd USENIX Secur. Symp. USENIX Assoc.","author":"Cui","year":"2023"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/sp61157.2025.00240"},{"key":"ref46","first-page":"5699","article-title":"A NEW HOPE: Contextual privacy policies for mobile applications and an approach toward automated generation","volume-title":"Proc. 33rd USENIX Secur. Symp. USENIX Assoc.","author":"Pan","year":"2024"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.240916"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-96590-6_2"},{"key":"ref49","article-title":"Global comprehensive privacy law mapping chart","year":"2021"},{"key":"ref50","article-title":"W3C data privacy vocabularies and controls CG","year":"2017"},{"key":"ref51","article-title":"California consumer privacy act of 2018","year":"2018"},{"key":"ref52","article-title":"Lei geral de prote\u00e7\u00e3o de dados pessoais","year":"2020"},{"key":"ref53","article-title":"China\u2019s PIPL takes effect, compliance \u2018a challenge","author":"Bryant","year":"2021"},{"key":"ref54","article-title":"Selenium"},{"key":"ref55","article-title":"SingleFile"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/d18-1099"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1177\/001316446002000104"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1016\/0306-4573(88)90021-0"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.3115\/v1\/d14-1162"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00051"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/s00607-024-01331-9"},{"key":"ref62","first-page":"1639","article-title":"Data-driven model development for cardiomyocyte production experimental failure prediction","volume-title":"Proc. 30th Eur. Symp. Comput. Aided Process Eng., Comput. Aided Chem. Eng.","volume":"48","author":"Williams","year":"2020"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1214\/088342306000000493"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-006-6226-1"},{"key":"ref65","article-title":"XGBoost"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11603880\/11455246.pdf?arnumber=11455246","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T20:09:42Z","timestamp":1783973382000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11455246\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":65,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2026.3677283","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7]]}}}