{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,27]],"date-time":"2026-02-27T06:20:39Z","timestamp":1772173239665,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":58,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,10,24]],"date-time":"2022-10-24T00:00:00Z","timestamp":1666569600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"EPSRC","award":["EP\/S022503\/1"],"award-info":[{"award-number":["EP\/S022503\/1"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,10,24]]},"DOI":"10.1145\/3584318.3584320","type":"proceedings-article","created":{"date-parts":[[2023,6,26]],"date-time":"2023-06-26T22:06:15Z","timestamp":1687817175000},"page":"21-34","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":8,"title":["\u201cIt may be a pain in the backside but...\u201d Insights into the resilience of business after GDPR"],"prefix":"10.1145","author":[{"given":"Gerard","family":"Buckley","sequence":"first","affiliation":[]},{"given":"Tristan","family":"Caulfield","sequence":"additional","affiliation":[]},{"given":"Ingolf","family":"Becker","sequence":"additional","affiliation":[]}],"member":"320","published-online":{"date-parts":[[2023,6,26]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Maria Addis and Maria Kutar. 2018. The General Data Protection Regulation (GDPR) Emerging Technologies and UK Organisations: Awareness Implementation and Readiness. (2018). https:\/\/aisel.aisnet.org\/ukais2018\/29 Maria Addis and Maria Kutar. 2018. The General Data Protection Regulation (GDPR) Emerging Technologies and UK Organisations: Awareness Implementation and Readiness. (2018). https:\/\/aisel.aisnet.org\/ukais2018\/29"},{"key":"e_1_3_2_1_2_1","volume-title":"11th IFIP Summer School on Privacy and Identity Management. 1\u20137. https:\/\/docplayer.net\/124763164-Towards-dealing-with-gdpr-uncertainty.html","author":"Agarwal Sushant","unstructured":"Sushant Agarwal . 2016. Towards Dealing with GDPR Uncertainty . In 11th IFIP Summer School on Privacy and Identity Management. 1\u20137. https:\/\/docplayer.net\/124763164-Towards-dealing-with-gdpr-uncertainty.html Sushant Agarwal. 2016. Towards Dealing with GDPR Uncertainty. In 11th IFIP Summer School on Privacy and Identity Management. 1\u20137. https:\/\/docplayer.net\/124763164-Towards-dealing-with-gdpr-uncertainty.html"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.3160404"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1108\/DPRG-01-2019-0007"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1093\/oso"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1093\/acprof:osobl"},{"key":"e_1_3_2_1_7_1","volume-title":"Understanding regulation: theory, strategy, and practice","author":"Baldwin Robert","unstructured":"Robert Baldwin , Martin Cave , and Martin Lodge . 2012. Understanding regulation: theory, strategy, and practice ( 2 nd ed ed.). Oxford University Press , New York . Robert Baldwin, Martin Cave, and Martin Lodge. 2012. Understanding regulation: theory, strategy, and practice (2nd ed ed.). Oxford University Press, New York.","edition":"2"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(17)30041-6"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.3233\/IP-180002"},{"key":"e_1_3_2_1_10_1","volume-title":"The Economic Impact of the European Reform of Data Protection. 97","author":"Ciriani Stephane","year":"2015","unstructured":"Stephane Ciriani . 2015. The Economic Impact of the European Reform of Data Protection. 97 ( 2015 ), 41\u201358. Issue 1st quarter 2015. https:\/\/papers.ssrn.com\/abstract=2674010 Stephane Ciriani. 2015. The Economic Impact of the European Reform of Data Protection. 97 (2015), 41\u201358. Issue 1st quarter 2015. https:\/\/papers.ssrn.com\/abstract=2674010"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1163\/2210-7975_HRD-4679-0058"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2017.10.003"},{"key":"e_1_3_2_1_13_1","unstructured":"Laszlo Dellie. 2019. GDPR Compliance as a Competitive Advantage. ISACA. https:\/\/www.isaca.org\/resources\/news-and-trends\/isaca-now-blog\/2019\/gdpr-compliance-as-a-competitive-advantage Laszlo Dellie. 2019. GDPR Compliance as a Competitive Advantage. ISACA. https:\/\/www.isaca.org\/resources\/news-and-trends\/isaca-now-blog\/2019\/gdpr-compliance-as-a-competitive-advantage"},{"key":"e_1_3_2_1_14_1","unstructured":"Deloitte. 2018. GDPR Six Months On. https:\/\/www2.deloitte.com\/content\/dam\/Deloitte\/uk\/Documents\/risk\/deloitte-uk-risk-gdpr-six-months-on.pdf Deloitte. 2018. GDPR Six Months On. https:\/\/www2.deloitte.com\/content\/dam\/Deloitte\/uk\/Documents\/risk\/deloitte-uk-risk-gdpr-six-months-on.pdf"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1177\/1073110518822003"},{"key":"e_1_3_2_1_16_1","unstructured":"Dr John Paul Salter. 2020. What does a level playing field mean?https:\/\/ukandeu.ac.uk\/explainers\/what-does-a-level-playing-field-mean\/ Dr John Paul Salter. 2020. What does a level playing field mean?https:\/\/ukandeu.ac.uk\/explainers\/what-does-a-level-playing-field-mean\/"},{"key":"e_1_3_2_1_17_1","unstructured":"Daria Dubrova. 2018. Challenges and Benefits of GDPR Implementation. The App Solutions. https:\/\/theappsolutions.com\/blog\/development\/gdpr-challenges-and-benefits\/ Daria Dubrova. 2018. Challenges and Benefits of GDPR Implementation. The App Solutions. https:\/\/theappsolutions.com\/blog\/development\/gdpr-challenges-and-benefits\/"},{"key":"e_1_3_2_1_19_1","unstructured":"EU Agency for fundamental rights. 1981. Article 8 - Protection of personal data. https:\/\/fra.europa.eu\/en\/eu-charter\/article\/8-protection-personal-data EU Agency for fundamental rights. 1981. Article 8 - Protection of personal data. https:\/\/fra.europa.eu\/en\/eu-charter\/article\/8-protection-personal-data"},{"key":"e_1_3_2_1_20_1","volume-title":"General Data Protection Regulation One Year On. IP\/19\/2956","author":"European Commission","year":"2019","unstructured":"European Commission . 2019. General Data Protection Regulation One Year On. IP\/19\/2956 ( 2019 ). https:\/\/ec.europa.eu\/commission\/presscorner\/detail\/en\/IP_19_2956 European Commission. 2019. General Data Protection Regulation One Year On. IP\/19\/2956 (2019). https:\/\/ec.europa.eu\/commission\/presscorner\/detail\/en\/IP_19_2956"},{"key":"e_1_3_2_1_21_1","volume-title":"Directorate General for Justice and Consumers","author":"European Commission","year":"2020","unstructured":"European Commission , Directorate General for Justice and Consumers . 2020 . EU : Multistakeholder Experts Group Publishes Contribution on GDPR Evaluation. DataGuidance. https:\/\/www.dataguidance.com\/news\/eu-multistakeholder-experts-group-publishes European Commission, Directorate General for Justice and Consumers. 2020. EU: Multistakeholder Experts Group Publishes Contribution on GDPR Evaluation. DataGuidance. https:\/\/www.dataguidance.com\/news\/eu-multistakeholder-experts-group-publishes"},{"key":"e_1_3_2_1_22_1","volume-title":"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/PDF\/?uri=CELEX:32016R0679","author":"European Parliament and of the Council","year":"2016","unstructured":"European Parliament and of the Council . 2016. Regulation (EU) 2016\/679. 119, 1 ( 2016 ). https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/PDF\/?uri=CELEX:32016R0679 European Parliament and of the Council. 2016. Regulation (EU) 2016\/679. 119, 1 (2016). https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/PDF\/?uri=CELEX:32016R0679"},{"key":"e_1_3_2_1_23_1","unstructured":"European Union. 2022. General data protection regulation (GDPR). https:\/\/eur-lex.europa.eu\/EN\/legal-content\/summary\/general-data-protection-regulation-gdpr.html European Union. 2022. General data protection regulation (GDPR). https:\/\/eur-lex.europa.eu\/EN\/legal-content\/summary\/general-data-protection-regulation-gdpr.html"},{"key":"e_1_3_2_1_24_1","volume-title":"Council Post: Five Benefits GDPR Compliance Will Bring To Your Business.","author":"Fimin Michael","year":"2018","unstructured":"Michael Fimin . 2018 . Council Post: Five Benefits GDPR Compliance Will Bring To Your Business. (2018). https:\/\/www.forbes.com\/sites\/forbestechcouncil\/2018\/03\/29\/five-benefits-gdpr-compliance-will-bring-to-your-business\/ Michael Fimin. 2018. Council Post: Five Benefits GDPR Compliance Will Bring To Your Business. (2018). https:\/\/www.forbes.com\/sites\/forbestechcouncil\/2018\/03\/29\/five-benefits-gdpr-compliance-will-bring-to-your-business\/"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.20897\/jisem"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(18)30055-1"},{"key":"e_1_3_2_1_27_1","unstructured":"GDPR.EU. 2018. What are the GDPR Fines?https:\/\/gdpr.eu\/fines\/ GDPR.EU. 2018. What are the GDPR Fines?https:\/\/gdpr.eu\/fines\/"},{"key":"e_1_3_2_1_28_1","unstructured":"GDPR.eu. 2019. GDPR Small Business Survey. https:\/\/gdpr.eu\/2019-small-business-survey\/ GDPR.eu. 2019. GDPR Small Business Survey. https:\/\/gdpr.eu\/2019-small-business-survey\/"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-05023-2_4"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0232076"},{"key":"e_1_3_2_1_31_1","unstructured":"Hemback Legal. 2022. Article 8 ECHR - Right to private life family life correspondence and home. https:\/\/human-rights-law.eu\/echr\/article-8-echr-right-to-private-life-family-life-correspondence-and-home\/ Hemback Legal. 2022. Article 8 ECHR - Right to private life family life correspondence and home. https:\/\/human-rights-law.eu\/echr\/article-8-echr-right-to-private-life-family-life-correspondence-and-home\/"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.4324\/9781315124827"},{"key":"e_1_3_2_1_33_1","volume-title":"Data Privacy: Demystifying The GDPR. iSchool | Syracuse University. https:\/\/ischool-dev.syr.edu\/data-privacy-demystifying-gdpr\/","author":"Kaushik Wang","year":"2018","unstructured":"Wang Kaushik . 2018 . Data Privacy: Demystifying The GDPR. iSchool | Syracuse University. https:\/\/ischool-dev.syr.edu\/data-privacy-demystifying-gdpr\/ Wang Kaushik. 2018. Data Privacy: Demystifying The GDPR. iSchool | Syracuse University. https:\/\/ischool-dev.syr.edu\/data-privacy-demystifying-gdpr\/"},{"key":"e_1_3_2_1_34_1","first-page":"99","article-title":"Data Protection in the Wake of the GDPR: California\u2019s Solution for Protecting \"the World\u2019s Most Valuable Resource","volume":"93","author":"Kessler Joanna","year":"2019","unstructured":"Joanna Kessler . 2019 . Data Protection in the Wake of the GDPR: California\u2019s Solution for Protecting \"the World\u2019s Most Valuable Resource \" Notes. 93 , 1 (2019), 99 \u2013 128 . https:\/\/heinonline.org\/HOL\/P?h=hein.journals\/scal93&i=109 Joanna Kessler. 2019. Data Protection in the Wake of the GDPR: California\u2019s Solution for Protecting \"the World\u2019s Most Valuable Resource\" Notes. 93, 1 (2019), 99\u2013128. https:\/\/heinonline.org\/HOL\/P?h=hein.journals\/scal93&i=109","journal-title":"Notes."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1353-4858(18)30057-6"},{"key":"e_1_3_2_1_36_1","volume-title":"GDPR: What Are the Challenges? Stibbe. https:\/\/www.stibbe.com\/en\/expertise\/practiceareas\/data-protection\/general-data-protection-regulation\/what-are-the-challenges","author":"Krikke Judica","year":"2019","unstructured":"Judica Krikke , Erik Valgaeren , and G\u00e9rald Origer . 2019 . GDPR: What Are the Challenges? Stibbe. https:\/\/www.stibbe.com\/en\/expertise\/practiceareas\/data-protection\/general-data-protection-regulation\/what-are-the-challenges Judica Krikke, Erik Valgaeren, and G\u00e9rald Origer. 2019. GDPR: What Are the Challenges? Stibbe. https:\/\/www.stibbe.com\/en\/expertise\/practiceareas\/data-protection\/general-data-protection-regulation\/what-are-the-challenges"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1080\/1097198X.2019.1569186"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.13052\/jmbmit2245-456X.434"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.23919\/CISTI.2018.8399156"},{"key":"e_1_3_2_1_40_1","volume-title":"The foundations of EU data protection law","author":"Lynskey Orla","unstructured":"Orla Lynskey . 2015. The foundations of EU data protection law . Oxford University Press . Orla Lynskey. 2015. The foundations of EU data protection law. Oxford University Press."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(18)30085-X"},{"key":"e_1_3_2_1_42_1","unstructured":"OECD. 2022. Entrepreneurship - Enterprises by business size. http:\/\/data.oecd.org\/entrepreneur\/enterprises-by-business-size.htm OECD. 2022. Entrepreneurship - Enterprises by business size. http:\/\/data.oecd.org\/entrepreneur\/enterprises-by-business-size.htm"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1108\/OXAN-DB243916"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1177\/0266382116650297"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(19)30007-7"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1093\/cybsec"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1108\/DPRG-05-2019-0039"},{"key":"e_1_3_2_1_48_1","volume-title":"Proceedings from the Annual NOKOBIT Conference","author":"Presthus Wanda","year":"2018","unstructured":"Wanda Presthus , Hanne S\u00f8rum , and Linda\u00a0Renate Andersen . 2018 . GDPR Compliance in Norwegian Companies . In Proceedings from the Annual NOKOBIT Conference ( Svalbard, Norway), Vol.\u00a026. Nokobit. https:\/\/ojs.bibsys.no\/index.php\/Nokobit\/article\/view\/543 Wanda Presthus, Hanne S\u00f8rum, and Linda\u00a0Renate Andersen. 2018. GDPR Compliance in Norwegian Companies. In Proceedings from the Annual NOKOBIT Conference (Svalbard, Norway), Vol.\u00a026. Nokobit. https:\/\/ojs.bibsys.no\/index.php\/Nokobit\/article\/view\/543"},{"key":"e_1_3_2_1_49_1","volume-title":"The GDPR One Year Later: Protecting Privacy or Preventing Access to Information Essays. 93, 5","author":"Sanders Amy\u00a0Kristin","year":"2018","unstructured":"Amy\u00a0Kristin Sanders . 2018. The GDPR One Year Later: Protecting Privacy or Preventing Access to Information Essays. 93, 5 ( 2018 ), 1229\u20131254. https:\/\/heinonline.org\/HOL\/P?h=hein.journals\/tulr93&i=1313 Amy\u00a0Kristin Sanders. 2018. The GDPR One Year Later: Protecting Privacy or Preventing Access to Information Essays. 93, 5 (2018), 1229\u20131254. https:\/\/heinonline.org\/HOL\/P?h=hein.journals\/tulr93&i=1313"},{"key":"e_1_3_2_1_50_1","volume-title":"The GDPR\u2019s Lose-Lose Dilemma: Minimal Benefits to Data Privacy & Significant Burdens on Business. 20, 2","author":"Shyy Sarah","year":"2020","unstructured":"Sarah Shyy . 2020. The GDPR\u2019s Lose-Lose Dilemma: Minimal Benefits to Data Privacy & Significant Burdens on Business. 20, 2 ( 2020 ), 137\u2013164. https:\/\/heinonline.org\/HOL\/P?h=hein.journals\/ucdbulj20&i=149 Sarah Shyy. 2020. The GDPR\u2019s Lose-Lose Dilemma: Minimal Benefits to Data Privacy & Significant Burdens on Business. 20, 2 (2020), 137\u2013164. https:\/\/heinonline.org\/HOL\/P?h=hein.journals\/ucdbulj20&i=149"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.23919\/MIPRO.2018.8400247"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1177\/1098214005283748"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2017.05.015"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.inteco.2015.11.001"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1093\/idpl"},{"key":"e_1_3_2_1_56_1","unstructured":"Nick Wallace and Daniel Castro. 2018. The Impact of the EU\u2019s New Data Protection Regulation on AI. (2018). https:\/\/datainnovation.org\/2018\/03\/the-impact-of-the-eus-new-data-protection-regulation-on-ai\/ Nick Wallace and Daniel Castro. 2018. The Impact of the EU\u2019s New Data Protection Regulation on AI. (2018). https:\/\/datainnovation.org\/2018\/03\/the-impact-of-the-eus-new-data-protection-regulation-on-ai\/"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"crossref","unstructured":"White S. 2018. General Data Protection Regulation and the Trust of the Consumer. (2018). https:\/\/gdpr.report\/news\/2018\/01\/23\/general-data-protection-regulation-trust-consumer\/ White S. 2018. General Data Protection Regulation and the Trust of the Consumer. (2018). https:\/\/gdpr.report\/news\/2018\/01\/23\/general-data-protection-regulation-trust-consumer\/","DOI":"10.15308\/Sinteza-2018-23-30"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10551-006-9187-1"},{"key":"e_1_3_2_1_59_1","unstructured":"World Economic Forum. 2020. Agile Regulation for the Fourth Industrial Revolution: A Toolkit for Regulators. https:\/\/www.weforum.org\/pages\/agile-regulation-for-the-fourth-industrial-revolution-a-toolkit-for-regulators\/ World Economic Forum. 2020. Agile Regulation for the Fourth Industrial Revolution: A Toolkit for Regulators. https:\/\/www.weforum.org\/pages\/agile-regulation-for-the-fourth-industrial-revolution-a-toolkit-for-regulators\/"}],"event":{"name":"NSPW '22: New Security Paradigms Workshop","location":"North Conway NH USA","acronym":"NSPW '22"},"container-title":["Proceedings of the 2022 New Security Paradigms Workshop"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3584318.3584320","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3584318.3584320","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:48:54Z","timestamp":1750182534000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3584318.3584320"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,10,24]]},"references-count":58,"alternative-id":["10.1145\/3584318.3584320","10.1145\/3584318"],"URL":"https:\/\/doi.org\/10.1145\/3584318.3584320","relation":{},"subject":[],"published":{"date-parts":[[2022,10,24]]},"assertion":[{"value":"2023-06-26","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}