{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T11:36:19Z","timestamp":1791459379078,"version":"4.3.4"},"publisher-location":"New York, NY, USA","reference-count":45,"publisher":"ACM","funder":[{"name":"Luxembourg National Research Fund (FNR)","award":["NCER22\/IS\/16 570468\/NCER-FT"],"award-info":[{"award-number":["NCER22\/IS\/16 570468\/NCER-FT"]}]},{"name":"Luxembourg National Research Fund (FNR)","award":["C21\/IS\/16344458"],"award-info":[{"award-number":["C21\/IS\/16344458"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,6,23]]},"DOI":"10.1145\/3696630.3728508","type":"proceedings-article","created":{"date-parts":[[2025,7,28]],"date-time":"2025-07-28T19:08:09Z","timestamp":1753729689000},"page":"606-610","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["Toward LLM-Driven GDPR Compliance Checking for Android Apps"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5963-4599","authenticated-orcid":false,"given":"Marco","family":"Alecci","sequence":"first","affiliation":[{"name":"University of Luxembourg, Luxembourg, Luxembourg"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4449-5792","authenticated-orcid":false,"given":"Nicolas","family":"Sannier","sequence":"additional","affiliation":[{"name":"University of Luxembourg, Luxembourg, Luxembourg"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3800-0906","authenticated-orcid":false,"given":"Marcello","family":"Ceci","sequence":"additional","affiliation":[{"name":"University of Luxembourg, Luxembourg, Luxembourg"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6095-447X","authenticated-orcid":false,"given":"Sallam","family":"Abualhaija","sequence":"additional","affiliation":[{"name":"University of Luxembourg, Luxembourg, Luxembourg"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6052-6184","authenticated-orcid":false,"given":"Jordan","family":"Samhi","sequence":"additional","affiliation":[{"name":"University of Luxembourg, Luxembourg, Luxembourg"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4854-685X","authenticated-orcid":false,"given":"Domenico","family":"Bianculli","sequence":"additional","affiliation":[{"name":"University of Luxembourg, Luxembourg, Luxembourg"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7270-9869","authenticated-orcid":false,"given":"Tegawend\u00e9","family":"Bissyand\u00e9","sequence":"additional","affiliation":[{"name":"University of Luxembourg, Luxembourg, Luxembourg"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4052-475X","authenticated-orcid":false,"given":"Jacques","family":"Klein","sequence":"additional","affiliation":[{"name":"University of Luxembourg, Luxembourg, Luxembourg"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,7,28]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"1090","volume-title":"{POLICYCOMP}: Counterpart comparison of privacy policies uncovers overbroad personal data collection practices,\" in 32nd USENIX Security Symposium (USENIX Security 23)","author":"Zhou L.","year":"2023","unstructured":"L. Zhou, C. Wei, T. Zhu, G. Chen, X. Zhang, S. Du, H. Cao, and H. Zhu, \"{POLICYCOMP}: Counterpart comparison of privacy policies uncovers overbroad personal data collection practices,\" in 32nd USENIX Security Symposium (USENIX Security 23), 2023, pp. 1073\u20131090."},{"key":"e_1_3_2_1_2_1","first-page":"620","volume-title":"50 ways to leak your data: An exploration of apps' circumvention of the android permissions system,\" in 28th USENIX Security Symposium (USENIX Security 19)","author":"Reardon J.","year":"2019","unstructured":"J. Reardon, \u00c1. Feal, P. Wijesekera, A. E. B. On, N. Vallina-Rodriguez, and S. Egelman, \"50 ways to leak your data: An exploration of apps' circumvention of the android permissions system,\" in 28th USENIX Security Symposium (USENIX Security 19). Santa Clara, CA: USENIX Association, Aug. 2019, pp. 603\u2013620. [Online]. Available: https:\/\/www.usenix.org\/conference\/usenixsecurity19\/presentation\/reardon"},{"key":"e_1_3_2_1_3_1","first-page":"9","volume-title":"IEEE","author":"Verderame L.","year":"2020","unstructured":"L. Verderame, D. Caputo, A. Romdhana, and A. Merlo, \"On the (un) reliability of privacy policies in android apps,\" in 2020 international joint conference on neural networks (IJCNN). IEEE, 2020, pp. 1\u20139."},{"key":"e_1_3_2_1_4_1","unstructured":"European Parliament and Council of the European Union \"Regulation (EU) 2016\/679 of the European Parliament and of the Council \" 2016. [Online]. Available: https:\/\/data.europa.eu\/eli\/reg\/2016\/679\/oj"},{"key":"e_1_3_2_1_5_1","first-page":"3387","volume-title":"Policychecker: Analyzing the gdpr completeness of mobile apps' privacy policies,\" in Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","author":"Xiang A.","year":"2023","unstructured":"A. Xiang, W. Pei, and C. Yue, \"Policychecker: Analyzing the gdpr completeness of mobile apps' privacy policies,\" in Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, 2023, pp. 3373\u20133387."},{"key":"e_1_3_2_1_6_1","first-page":"2154","article-title":"Have you been properly notified? automatic compliance analysis of privacy policy text with gdpr article 13","volume":"2021","author":"Liu S.","year":"2021","unstructured":"S. Liu, B. Zhao, R. Guo, G. Meng, F. Zhang, and M. Zhang, \"Have you been properly notified? automatic compliance analysis of privacy policy text with gdpr article 13,\" in Proceedings of the Web Conference 2021, 2021, pp. 2154\u20132164.","journal-title":"Proceedings of the Web Conference"},{"key":"e_1_3_2_1_7_1","volume-title":"Compai: A tool for gdpr completeness checking of privacy policies using artificial intelligence,\" in IEEE\/ACM International Conference on Automated Software Engineering","author":"Cejas O. Amaral","year":"2024","unstructured":"O. Amaral Cejas, S. Abualhaija, and L. Briand, \"Compai: A tool for gdpr completeness checking of privacy policies using artificial intelligence,\" in IEEE\/ACM International Conference on Automated Software Engineering. Association for Computing Machinery, 2024."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2021.3124332"},{"key":"e_1_3_2_1_9_1","first-page":"40","article-title":"A combined rule-based and machine learning approach for automated gdpr compliance checking","author":"Hamdani R. E.","year":"2021","unstructured":"R. E. Hamdani, M. Mustapha, D. R. Amariles, A. Troussel, S. Mee\u00f9s, and K. Krasnashchok, \"A combined rule-based and machine learning approach for automated gdpr compliance checking,\" in Proceedings of the Eighteenth International Conference on Artificial Intelligence and Law, 2021, pp. 40\u201349.","journal-title":"Proceedings of the Eighteenth International Conference on Artificial Intelligence and Law"},{"key":"e_1_3_2_1_10_1","volume-title":"Rethinking legal compliance automation: Opportunities with large language models,\" arXiv preprint arXiv:2404.14356","author":"Hassani S.","year":"2024","unstructured":"S. Hassani, M. Sabetzadeh, D. Amyot, and J. Liao, \"Rethinking legal compliance automation: Opportunities with large language models,\" arXiv preprint arXiv:2404.14356, 2024."},{"key":"e_1_3_2_1_11_1","first-page":"1","article-title":"Large language models: a new approach for privacy policy analysis at scale","author":"Rodriguez D.","year":"2024","unstructured":"D. Rodriguez, I. Yang, J. M. Del Alamo, and N. Sadeh, \"Large language models: a new approach for privacy policy analysis at scale,\" Computing, pp. 1\u201325, 2024.","journal-title":"Computing"},{"key":"e_1_3_2_1_12_1","volume-title":"Policylr: A logic representation for privacy policies,\" arXiv preprint arXiv:2408.14830","author":"Hooda A.","year":"2024","unstructured":"A. Hooda, R. Khandelwal, P. Chalasani, K. Fawaz, and S. Jha, \"Policylr: A logic representation for privacy policies,\" arXiv preprint arXiv:2408.14830, 2024."},{"key":"e_1_3_2_1_13_1","volume-title":"Privacy policy analysis through prompt engineering for LLMs,\" arXiv preprint arXiv:2409.14879","author":"Goknil A.","year":"2024","unstructured":"A. Goknil, F. B. Gelderblom, S. Tverdal, S. Tokas, and H. Song, \"Privacy policy analysis through prompt engineering for LLMs,\" arXiv preprint arXiv:2409.14879, 2024."},{"key":"e_1_3_2_1_14_1","first-page":"36","volume-title":"Toward a framework for detecting privacy policy violations in android application code,\" in Proceedings of the 38th International conference on software engineering","author":"Slavin R.","year":"2016","unstructured":"R. Slavin, X. Wang, M. B. Hosseini, J. Hester, R. Krishnan, J. Bhatia, T. D. Breaux, and J. Niu, \"Toward a framework for detecting privacy policy violations in android application code,\" in Proceedings of the 38th International conference on software engineering, 2016, pp. 25\u201336."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3569936"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3053130"},{"key":"e_1_3_2_1_17_1","first-page":"264","volume-title":"IEEE","author":"Fan M.","year":"2020","unstructured":"M. Fan, L. Yu, S. Chen, H. Zhou, X. Luo, S. Li, Y. Liu, J. Liu, and T. Liu, \"An empirical evaluation of gdpr compliance violations in android mhealth apps,\" in 2020 IEEE 31st international symposium on software reliability engineering (ISSRE). IEEE, 2020, pp. 253\u2013264."},{"key":"e_1_3_2_1_18_1","first-page":"13","volume-title":"Prompting is all you need: Automated android bug replay with large language models,\" in Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering","author":"Feng S.","year":"2024","unstructured":"S. Feng and C. Chen, \"Prompting is all you need: Automated android bug replay with large language models,\" in Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering, 2024, pp. 1\u201313."},{"key":"e_1_3_2_1_19_1","first-page":"1","article-title":"Make LLM a testing expert: Bringing human-like interaction to mobile gui testing via functionality-aware decisions","author":"Liu Z.","year":"2024","unstructured":"Z. Liu, C. Chen, J. Wang, M. Chen, B. Wu, X. Che, D.Wang, and Q. Wang, \"Make LLM a testing expert: Bringing human-like interaction to mobile gui testing via functionality-aware decisions,\" in Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering, 2024, pp. 1\u201313.","journal-title":"Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering"},{"key":"e_1_3_2_1_20_1","first-page":"13","volume-title":"Crashtranslator: Automatically reproducing mobile application crashes directly from stack trace,\" in Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering","author":"Huang Y.","year":"2024","unstructured":"Y. Huang, J. Wang, Z. Liu, Y. Wang, S. Wang, C. Chen, Y. Hu, and Q. Wang, \"Crashtranslator: Automatically reproducing mobile application crashes directly from stack trace,\" in Proceedings of the 46th IEEE\/ACM International Conference on Software Engineering, 2024, pp. 1\u201313."},{"key":"e_1_3_2_1_21_1","volume-title":"Apppoet: Large language model based android malware detection via multi-view prompt engineering,\" arXiv preprint arXiv:2404.18816","author":"Zhao W.","year":"2024","unstructured":"W. Zhao, J. Wu, and Z. Meng, \"Apppoet: Large language model based android malware detection via multi-view prompt engineering,\" arXiv preprint arXiv:2404.18816, 2024."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3649828"},{"key":"e_1_3_2_1_23_1","first-page":"1","article-title":"Gptscan: Detecting logic vulnerabilities in smart contracts by combining gpt with program analysis","author":"Sun Y.","year":"2024","unstructured":"Y. Sun, D. Wu, Y. Xue, H. Liu, H. Wang, Z. Xu, X. Xie, and Y. Liu, \"Gptscan: Detecting logic vulnerabilities in smart contracts by combining gpt with program analysis,\" in Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering, 2024, pp. 1\u201313.","journal-title":"Proceedings of the IEEE\/ACM 46th International Conference on Software Engineering"},{"key":"e_1_3_2_1_24_1","volume-title":"Understanding the effectiveness of large language models in detecting security vulnerabilities,\" arXiv preprint arXiv:2311.16169","author":"Khare A.","year":"2023","unstructured":"A. Khare, S. Dutta, Z. Li, A. Solko-Breslin, R. Alur, and M. Naik, \"Understanding the effectiveness of large language models in detecting security vulnerabilities,\" arXiv preprint arXiv:2311.16169, 2023."},{"key":"e_1_3_2_1_25_1","first-page":"27","volume-title":"PMLR","author":"Pei K.","year":"2023","unstructured":"K. Pei, D. Bieber, K. Shi, C. Sutton, and P. Yin, \"Can large language models reason about program invariants?\" in International Conference on Machine Learning. PMLR, 2023, pp. 27 496\u201327 520."},{"key":"e_1_3_2_1_26_1","volume-title":"Lms: Understanding code syntax and semantics for code analysis,\" arXiv preprint arXiv:2305.12138","author":"Ma W.","year":"2023","unstructured":"W. Ma, S. Liu, Z. Lin, W. Wang, Q. Hu, Y. Liu, C. Zhang, L. Nie, L. Li, and Y. Liu, \"Lms: Understanding code syntax and semantics for code analysis,\" arXiv preprint arXiv:2305.12138, 2023."},{"key":"e_1_3_2_1_27_1","volume-title":"Zhang et al., \"Automatic code summarization via chatgpt: How far are we?\" arXiv preprint arXiv:2305.12865","author":"Sun W.","year":"2023","unstructured":"W. Sun, C. Fang, Y. You, Y. Miao, Y. Liu, Y. Li, G. Deng, S. Huang, Y. Chen, Q. Zhang et al., \"Automatic code summarization via chatgpt: How far are we?\" arXiv preprint arXiv:2305.12865, 2023."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"crossref","unstructured":"A. P. S. Venkatesh S. Sabu A. M. Mir S. Reis and E. Bodden \"The emergence of large language models in static analysis: A first look through micro-benchmarks \" in Proceedings of the 2024 IEEE\/ACM First International Conference on AI Foundation Models and Software Engineering 2024 pp. 35\u201339.","DOI":"10.1145\/3650105.3652288"},{"key":"e_1_3_2_1_29_1","unstructured":"Google \"Dalvik bytecode forma \" 2024. [Online]. Available: https:\/\/source.android.com\/docs\/core\/runtime\/dalvik-bytecode"},{"key":"e_1_3_2_1_30_1","unstructured":"M. Alecci \"App compliance llm (github repository).\" [Online]. Available: https:\/\/github.com\/Trustworthy-Software\/AppComplianceLLM"},{"key":"e_1_3_2_1_31_1","unstructured":"M. Alecci \"App compliance llm (zenodo resource).\" [Online]. Available: https:\/\/zenodo.org\/records\/15168296"},{"key":"e_1_3_2_1_32_1","unstructured":"\"Apktool \" https:\/\/apktool.org\/ accessed: 2024-10-04."},{"key":"e_1_3_2_1_33_1","first-page":"36","volume-title":"IEEE","author":"Samhi J.","year":"2024","unstructured":"J. Samhi, T. F. Bissyand\u00e9, and J. Klein, \"Androlibzoo: A reliable dataset of libraries based on software dependency analysis,\" in 2024 IEEE\/ACM 21st International Conference on Mining Software Repositories (MSR). IEEE, 2024, pp. 32\u201336."},{"key":"e_1_3_2_1_34_1","unstructured":"\"Ollama \" https:\/\/ollama.com\/ accessed: 2024-10-04."},{"key":"e_1_3_2_1_35_1","unstructured":"Ollama \"Ollama: A command-line interface for ai models \" https:\/\/github.com\/ollama\/ollama accessed: 2024-10-04."},{"key":"e_1_3_2_1_36_1","unstructured":"M. AI \"Llama 3.1 8b \" https:\/\/huggingface.co\/meta-llama\/Llama-3.1-8B 2024 accessed: 2024-10-10."},{"key":"e_1_3_2_1_37_1","unstructured":"NVIDIA \"Dgx station system architecture whitepaper \" 2024 accessed: 2024-10-10. [Online]. Available: https:\/\/www.nvidia.com\/en-gb\/data-center\/resources\/dgx-station-system-architecture-whitepaper\/"},{"key":"e_1_3_2_1_38_1","first-page":"1","article-title":"Understanding the gdpr from a requirements engineering perspective \u2014 a systematic mapping study on regulatory data protection requirements","author":"Negri-Ribalta C.","year":"2024","unstructured":"C. Negri-Ribalta and M. L.-P. C. Salinesi, \"Understanding the gdpr from a requirements engineering perspective \u2014 a systematic mapping study on regulatory data protection requirements,\" Requir. Eng., pp. 1\u201327, 2024.","journal-title":"Requir. Eng."},{"key":"e_1_3_2_1_39_1","unstructured":"Google \"Firebase \" 2024 accessed: 2024-11-12. [Online]. Available: https:\/\/firebase.google.com\/"},{"key":"e_1_3_2_1_40_1","volume-title":"Mistral 7b","author":"Jiang A. Q.","year":"2023","unstructured":"A. Q. Jiang, A. Sablayrolles, A. Mensch, C. Bamford, D. S. Chaplot, D. de las Casas, F. Bressand, G. Lengyel, G. Lample, L. Saulnier, L. R. Lavaud, M.-A. Lachaux, P. Stock, T. L. Scao, T. Lavril, T. Wang, T. Lacroix, and W. E. Sayed, \"Mistral 7b,\" 2023. [Online]. Available: https:\/\/arxiv.org\/abs\/2310.06825"},{"key":"e_1_3_2_1_41_1","unstructured":"OpenAI \"Gpt-4 technical report \" 2024. [Online]. Available: https:\/\/arxiv.org\/abs\/2303.08774"},{"key":"e_1_3_2_1_42_1","unstructured":"OpenAI \"Gpt-4o system card \" 2024. [Online]. Available: https:\/\/arxiv.org\/abs\/2410.21276"},{"key":"e_1_3_2_1_43_1","first-page":"209","volume-title":"IEEE","author":"Gao J.","year":"2019","unstructured":"J. Gao, L. Li, T. F. Bissyand\u00e9, and J. Klein, \"On the evolution of mobile app complexity,\" in 2019 24th international conference on engineering of complex computer systems (ICECCS). IEEE, 2019, pp. 200\u2013209."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2024.124912"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i21.30517"}],"event":{"name":"FSE Companion '25: 33rd ACM International Conference on the Foundations of Software Engineering","location":"Clarion Hotel Trondheim Trondheim Norway","acronym":"FSE Companion '25","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering"]},"container-title":["Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3696630.3728508","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,28]],"date-time":"2025-07-28T19:10:03Z","timestamp":1753729803000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3696630.3728508"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,23]]},"references-count":45,"alternative-id":["10.1145\/3696630.3728508","10.1145\/3696630"],"URL":"https:\/\/doi.org\/10.1145\/3696630.3728508","relation":{},"subject":[],"published":{"date-parts":[[2025,6,23]]},"assertion":[{"value":"2025-07-28","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}