{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T01:26:25Z","timestamp":1783473985585,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":25,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,1,15]],"date-time":"2018-01-15T00:00:00Z","timestamp":1515974400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100000266","name":"Engineering and Physical Sciences Research Council","doi-asserted-by":"publisher","award":["EP\/P00881X\/1"],"award-info":[{"award-number":["EP\/P00881X\/1"]}],"id":[{"id":"10.13039\/501100000266","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,1,15]]},"DOI":"10.1145\/3267357.3267368","type":"proceedings-article","created":{"date-parts":[[2018,10,16]],"date-time":"2018-10-16T13:23:10Z","timestamp":1539696190000},"page":"88-95","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":86,"title":["Are We There Yet?"],"prefix":"10.1145","author":[{"given":"Sean","family":"Sirur","sequence":"first","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jason R.C.","family":"Nurse","sequence":"additional","affiliation":[{"name":"University of Kent, Canterbury, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Helena","family":"Webb","sequence":"additional","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2018,1,15]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"S Agarwal. 2016. Towards dealing with GDPR uncertainty. In IFIP Summer School .  S Agarwal. 2016. Towards dealing with GDPR uncertainty. In IFIP Summer School ."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/3137616.3137617"},{"key":"e_1_3_2_1_3_1","unstructured":"CIPL & AvePoint. 2018. Organisational Readiness for the European Union General Data Protection Regulation (GDPR). https:\/\/www.informationpolicycentre.com\/global-readiness-benchmarks-for-gdpr.html.  CIPL & AvePoint. 2018. Organisational Readiness for the European Union General Data Protection Regulation (GDPR). https:\/\/www.informationpolicycentre.com\/global-readiness-benchmarks-for-gdpr.html."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2007.57"},{"key":"e_1_3_2_1_5_1","unstructured":"Computing Magazine. 2017. GDPR: full compliance is impossible for now - but here are the processes that can get you close. https:\/\/www.computing.co.uk\/ctg\/interview\/3015393\/gdpr-full-compliance-is-impossible-but-here-are-the-processes-that-can-get-you-close.  Computing Magazine. 2017. GDPR: full compliance is impossible for now - but here are the processes that can get you close. https:\/\/www.computing.co.uk\/ctg\/interview\/3015393\/gdpr-full-compliance-is-impossible-but-here-are-the-processes-that-can-get-you-close."},{"key":"e_1_3_2_1_6_1","volume-title":"ICO UK News Blog","author":"Denham E","year":"2017","unstructured":"E Denham . 2017. ICO UK News Blog ; GDPR - - sorting the fact from the fiction . https:\/\/iconewsblog.org.uk\/ 2017 \/08\/09\/gdpr-sorting-the-fact-from-the-fiction\/. E Denham. 2017. ICO UK News Blog; GDPR -- sorting the fact from the fiction . https:\/\/iconewsblog.org.uk\/2017\/08\/09\/gdpr-sorting-the-fact-from-the-fiction\/."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1163\/156916294X00016"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1093\/ijlit\/eax024"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1080\/13600834.2015.1091128"},{"key":"e_1_3_2_1_10_1","volume-title":"Perceptions of controllers on EU data protection reform: A Finnish perspective. Computer law & security review","author":"Mikkonen T","year":"2014","unstructured":"T Mikkonen . 2014. Perceptions of controllers on EU data protection reform: A Finnish perspective. Computer law & security review , Vol. 30 , 2 ( 2014 ), 190--195. T Mikkonen. 2014. Perceptions of controllers on EU data protection reform: A Finnish perspective. Computer law & security review , Vol. 30, 2 (2014), 190--195."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2017.3680959"},{"key":"e_1_3_2_1_12_1","volume-title":"Culture, Media & Sport","author":"Ipsos MORI & University of Portsmouth. 2018.","year":"2018","unstructured":"Ipsos MORI & University of Portsmouth. 2018. Department for Digital , Culture, Media & Sport ; Cyber Security Breaches Survey 2018 . Ipsos MORI & University of Portsmouth. 2018. Department for Digital, Culture, Media & Sport; Cyber Security Breaches Survey 2018."},{"key":"e_1_3_2_1_13_1","volume-title":"Information Commissioner's Office","author":"Information Commission","unstructured":"Information Commission er's Office. 2014. Information Commissioner's Office ; Data controllers and data processors: what the difference is and what the governance implications are. https:\/\/ico.org.uk\/media\/for-organisations\/documents\/1546\/data-controllers-and-data-processors-dp-guidance.pdf. Information Commissioner's Office. 2014. Information Commissioner's Office; Data controllers and data processors: what the difference is and what the governance implications are. https:\/\/ico.org.uk\/media\/for-organisations\/documents\/1546\/data-controllers-and-data-processors-dp-guidance.pdf."},{"key":"e_1_3_2_1_14_1","unstructured":"Information Commissioner's Office. 2018a. ICO's Guide to the General Data Protection Regulation. https:\/\/ico.org.uk\/for-organisations\/guide-to-the-general-data-protection-regulation-gdpr.  Information Commissioner's Office. 2018a. ICO's Guide to the General Data Protection Regulation. https:\/\/ico.org.uk\/for-organisations\/guide-to-the-general-data-protection-regulation-gdpr."},{"key":"e_1_3_2_1_15_1","volume-title":"Information Commissioner's Office","author":"Information Commission","unstructured":"Information Commission er's Office. 2018b. Information Commissioner's Office ; Data Protection Self Assessment Toolkit . https:\/\/ico.org.uk\/for-organisations\/resources-and-support\/data-protection-self-assessment\/. Information Commissioner's Office. 2018b. Information Commissioner's Office; Data Protection Self Assessment Toolkit. https:\/\/ico.org.uk\/for-organisations\/resources-and-support\/data-protection-self-assessment\/."},{"key":"e_1_3_2_1_16_1","unstructured":"EU Parliament and the Council of the EU. 27 Apr 2016. General Data Protection Regulation. http:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/.  EU Parliament and the Council of the EU. 27 Apr 2016. General Data Protection Regulation. http:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/."},{"key":"e_1_3_2_1_17_1","unstructured":"Paul Hastings LLP. 2017. Fortune and FTSE Firms to Spend Millions Gearing up for GDPR Compliance New Survey Shows. https:\/\/www.paulhastings.com\/news\/details\/?id=1c74ed69--2334--6428--811c-ff00004cbded.  Paul Hastings LLP. 2017. Fortune and FTSE Firms to Spend Millions Gearing up for GDPR Compliance New Survey Shows. https:\/\/www.paulhastings.com\/news\/details\/?id=1c74ed69--2334--6428--811c-ff00004cbded."},{"key":"e_1_3_2_1_18_1","volume-title":"Qualitative research practice: A guide for social science students and researchers","author":"Ritchie J","unstructured":"J Ritchie , J Lewis , CM Nicholls , and R Ormston . 2013. Qualitative research practice: A guide for social science students and researchers . Sage . J Ritchie, J Lewis, CM Nicholls, and R Ormston. 2013. Qualitative research practice: A guide for social science students and researchers .Sage."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"crossref","unstructured":"Help Net Security. 2018. Only 20% of companies have fully completed their GDPR implementations. https:\/\/www.helpnetsecurity.com\/2018\/07\/16\/complete-gdpr-implementation\/.  Help Net Security. 2018. Only 20% of companies have fully completed their GDPR implementations. https:\/\/www.helpnetsecurity.com\/2018\/07\/16\/complete-gdpr-implementation\/.","DOI":"10.1016\/S1353-4858(18)30017-5"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1353-4858(16)30056-3"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2017.05.015"},{"key":"e_1_3_2_1_22_1","volume-title":"The SAGE Handbook of Interview Research: The Complexity of the Craft","author":"Wang J","unstructured":"J Wang and Y Yan . 2012. The SAGE Handbook of Interview Research: The Complexity of the Craft 2 nd Edition Chapter 15 | The Interview Question. J Wang and Y Yan. 2012. The SAGE Handbook of Interview Research: The Complexity of the Craft 2nd Edition Chapter 15 | The Interview Question.","edition":"2"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2016.25"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2017.00029"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1186\/s13174-017-0059-y"}],"event":{"name":"CCS '18: 2018 ACM SIGSAC Conference on Computer and Communications Security","location":"Toronto Canada","acronym":"CCS '18","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2nd International Workshop on Multimedia Privacy and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3267357.3267368","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3267357.3267368","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T00:57:43Z","timestamp":1750208263000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3267357.3267368"}},"subtitle":["Understanding the Challenges Faced in Complying with the General Data Protection Regulation (GDPR)"],"short-title":[],"issued":{"date-parts":[[2018,1,15]]},"references-count":25,"alternative-id":["10.1145\/3267357.3267368","10.1145\/3267357"],"URL":"https:\/\/doi.org\/10.1145\/3267357.3267368","relation":{},"subject":[],"published":{"date-parts":[[2018,1,15]]},"assertion":[{"value":"2018-01-15","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}