{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T16:04:37Z","timestamp":1784131477087,"version":"3.55.0"},"reference-count":94,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"9","license":[{"start":{"date-parts":[[2023,9,1]],"date-time":"2023-09-01T00:00:00Z","timestamp":1693526400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2023,9]]},"DOI":"10.1109\/tse.2023.3290237","type":"journal-article","created":{"date-parts":[[2023,6,28]],"date-time":"2023-06-28T17:21:16Z","timestamp":1687972876000},"page":"4324-4348","source":"Crossref","is-referenced-by-count":39,"title":["Privacy Engineering in the Wild: Understanding the Practitioners\u2019 Mindset, Organizational Aspects, and Current Practices"],"prefix":"10.1109","volume":"49","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9005-0543","authenticated-orcid":false,"given":"Leonardo Horn","family":"Iwaya","sequence":"first","affiliation":[{"name":"Centre for Research on Engineering Software Technologies, The University of Adelaide, Adelaide, SA, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9696-3626","authenticated-orcid":false,"given":"Muhammad Ali","family":"Babar","sequence":"additional","affiliation":[{"name":"Centre for Research on Engineering Software Technologies, The University of Adelaide, Adelaide, SA, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0109-1341","authenticated-orcid":false,"given":"Awais","family":"Rashid","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Bristol Cyber Security Group, REPHRAIN: National Research Centre on Privacy, Harm Reduction and Adversarial Influence Online, University of Bristol, Bristol, U.K."}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Information Privacy Engineering and Privacy by Design: Understanding Privacy Threats, Technology, and Regulations Based on Standards and Best Practices","author":"Stallings","year":"2019"},{"key":"ref2","first-page":"3","article-title":"Now 157 countries: Twelve data privacy laws in 2021\/22","author":"Greenleaf","year":"2022","journal-title":"176 Privacy Laws Bus. Int. Rep. 1"},{"key":"ref3","first-page":"1","article-title":"Regulation (EU) 2016\/679 of the European parliament and of the council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing directive 95\/46\/EC (general data protection regulation)","volume":"119","year":"2016","journal-title":"Official J. Eur. Union"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.3212210"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2016.37"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-017-9517-1"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-44429-7_8"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-021-09995-z"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.14722\/usec.2014.23006"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3287056"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1080\/01972243.2019.1583296"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1038\/466029a"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1191\/1478088706qp0630a"},{"key":"ref14","volume-title":"Introduction to Computer Security","volume":"50","author":"Bishop","year":"2005"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-31668-5_2"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2015.13"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.6028\/nist.ir.8062"},{"key":"ref18","article-title":"Lei geral de protecao de dados pessoais (LGPD). (redacao dada pela lei no 13.853, de 2019)","year":"2018"},{"key":"ref19","article-title":"Privacy Act 1988, no. 119, 1988 - compilation no. 86","year":"2021"},{"key":"ref20","article-title":"Adequacy decisions\u2014How the EU determines if a non-EU country has an adequate level of data protection","author":"Commission","year":"2021"},{"key":"ref21","doi-asserted-by":"crossref","first-page":"759","DOI":"10.1016\/B978-0-12-803843-7.00053-3","article-title":"Privacy-enhancing technologies","volume-title":"Computer and Information Security Handbook","author":"Fischer-H\u00fcbner","year":"2017"},{"key":"ref22","first-page":"1","article-title":"Handbook of privacy and privacy-enhancing technologies","volume":"198","author":"Van Blarkom","year":"2003","journal-title":"Privacy Incorporated Softw. Agent (PISA) Consortium, The Hague"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3285002.3285006"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICSA-C.2019.00046"},{"key":"ref25","first-page":"1","article-title":"Privacy by design: The 7 foundational principles","volume":"5","author":"Cavoukian","year":"2009","journal-title":"Inf. Privacy Commissioner Ontario, Canada"},{"issue":"3","key":"ref26","first-page":"1\u201325","article-title":"Engineering privacy by design","volume":"14","author":"G\u00fcrses","year":"2011","journal-title":"Comput. Privacy Data Protection"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-55415-5_38"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2016.23"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/1415472.1415481"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/SEAA.2017.28"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2009.02.002"},{"key":"ref32","article-title":"ISO\/IEC TR 27550:2019 information technology - security techniques - privacy engineering for system life cycle processes","year":"2019"},{"key":"ref33","article-title":"NIST privacy framework: A tool for improving privacy through enterprise risk management, version 1.0","author":"Boeckl","year":"2020"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1037\/0021-9010.81.4.358"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1111\/j.1744-6570.1983.tb00500.x"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1146\/annurev-psych-113011-143809"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1037\/apl0000090"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1108\/JOSM-11-2018-0363"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.ssci.2021.105559"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1108\/TQM-03-2021-0092"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/s12144-021-02617-3"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.3390\/su13052800"},{"key":"ref43","volume-title":"Organizational Culture and Leadership","author":"Schein","year":"2010"},{"key":"ref44","volume-title":"Cultures Consequences: International Differences in Work-Related Values","author":"Hofstede","year":"1980"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.9707\/2307-0919.1014"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2009.09.002"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1080\/15536548.2005.10855772"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijinfomgt.2020.102124"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.3390\/e22040429"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3022198.3026326"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2018.2866769"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-55958-8_3"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1016\/j.tele.2018.05.012"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3210459.3210484"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/3364224"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/s00779-021-01544-1"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3432919"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2022-0038"},{"key":"ref59","first-page":"1\u201315","article-title":"WiP: Factors affecting the implementation of privacy and security practices in software development: A narrative review","volume-title":"Proc. 8th Annu. Hot Topics Sci. Secur. Symp.","author":"Nurgalieva"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3190373"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445677"},{"key":"ref62","article-title":"Privacy in aged care monitoring devices (ACMD): The developers\u2019 perspective","volume-title":"Digital Health: Changing the Way Healthcare is Conceptualised and Delivered","author":"Alkhatib","year":"2019"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2022-0108"},{"key":"ref64","first-page":"427","article-title":"Ethics emerging: The story of privacy and security perceptions in virtual reality","volume-title":"Proc. 14th Symp. Usable Privacy Secur.","author":"Adams"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/3267357.3267368"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1080\/1369118X.2019.1577475"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3411764.3445768"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.14722\/usec.2022.23094"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2022.111523"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-26250-1_6"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/3359174"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1108\/09685229810227649"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2006.02.008"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.12.003"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1002\/pfi.4140430905"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.4324\/9780080461687"},{"issue":"1","key":"ref77","first-page":"1\u2013487","article-title":"Privacy and freedom","volume":"25","author":"Westin","year":"1968","journal-title":"Washington Lee Law Rev."},{"key":"ref78","volume-title":"Understanding Privacy","author":"Solove","year":"2008"},{"key":"ref79","article-title":"Multilateral privacy requirements analysis in online social network services","author":"G\u00fcrses","year":"2010"},{"key":"ref80","article-title":"Privacy design strategies (the little blue book)","author":"Hoepman","year":"2018"},{"key":"ref81","first-page":"1701\u20131778","article-title":"Broken promises of privacy: Responding to the surprising failure of anonymization","volume":"57","author":"Ohm","year":"2009","journal-title":"UCLA law Rev."},{"key":"ref82","article-title":"Anonymization is dead\u2013long live privacy","author":"Zibuschka","year":"28-29, 2019","journal-title":"Open Identity Summit"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.7551\/mitpress\/12587.001.0001"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2004.41"},{"key":"ref85","article-title":"From dataveillance to data economy: Firm view on data protection","author":"Degli Esposti","year":"2016"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2015.01.005"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-29387-1_5"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1145\/3491102.3501883"},{"key":"ref89","article-title":"Privacy engineering meets software engineering. on the challenges of engineering privacy by design","author":"Kostova","year":"2020"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-010-0115-7"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-42048-2_18"},{"key":"ref92","article-title":"Automation potentials in privacy engineering","author":"Zimmermann","year":"2020","journal-title":"Open Identity Summit"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2022.106868"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-008-9102-8"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/32\/10255132\/10167784.pdf?arnumber=10167784","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T12:25:00Z","timestamp":1709295900000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10167784\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,9]]},"references-count":94,"journal-issue":{"issue":"9"},"URL":"https:\/\/doi.org\/10.1109\/tse.2023.3290237","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,9]]}}}