{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T17:00:21Z","timestamp":1781283621574,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":41,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6,23]]},"DOI":"10.1145\/3800506.3803491","type":"proceedings-article","created":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T16:24:42Z","timestamp":1781281482000},"page":"193-204","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Local Privacy Laws in a Globalized World"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1339-5481","authenticated-orcid":false,"given":"Shantanu","family":"Sharma","sequence":"first","affiliation":[{"name":"New Jersey Institute of Technology, Newark, NJ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-8265-3457","authenticated-orcid":false,"given":"Ethan","family":"Myers","sequence":"additional","affiliation":[{"name":"Colorado State University, Fort Collins, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0432-3686","authenticated-orcid":false,"given":"Lorenzo","family":"De Carli","sequence":"additional","affiliation":[{"name":"University of Calgary, Calgary, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0336-0258","authenticated-orcid":false,"given":"Ritwik","family":"Banerjee","sequence":"additional","affiliation":[{"name":"Stony Brook University, Stony Brook, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0714-7676","authenticated-orcid":false,"given":"Indrakshi","family":"Ray","sequence":"additional","affiliation":[{"name":"Colorado State University, Fort Collins, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,22]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Interdependent Privacy (IDP): tinyurl.com\/4n9p9d3p."},{"key":"e_1_3_2_1_2_1","unstructured":"DLA Piper: www.dlapiperdataprotection.com."},{"key":"e_1_3_2_1_3_1","unstructured":"OneTrust DataGuidance (IDP): tinyurl.com\/yc5vvfpf."},{"key":"e_1_3_2_1_4_1","first-page":"139","volume-title":"SOUPS","author":"Abrokwa D.","year":"2021","unstructured":"D. Abrokwa et al. Comparing security and privacy attitudes among U.S. users of different smartphone and smart-speaker platforms. In SOUPS, pages 139-158, 2021."},{"key":"e_1_3_2_1_5_1","volume-title":"Towards precise detection of personal information leaks in mobile health apps. CoRR, abs\/2410.00277","author":"Ardalani A.","year":"2024","unstructured":"A. Ardalani et al. Towards precise detection of personal information leaks in mobile health apps. CoRR, abs\/2410.00277, 2024."},{"key":"e_1_3_2_1_6_1","volume-title":"SOUPS, page 41\u201359","author":"Ayalon O.","year":"2019","unstructured":"O. Ayalon et al. Evaluating users' perceptions about a system's privacy: differentiating social and institutional aspects. In SOUPS, page 41\u201359, 2019."},{"key":"e_1_3_2_1_7_1","first-page":"184","volume-title":"IEEE SP","author":"Barth A.","year":"2006","unstructured":"A. Barth et al. Privacy and contextual integrity: Framework and applications. In IEEE SP, pages 184-198, 2006."},{"key":"e_1_3_2_1_8_1","first-page":"277","article-title":"I'm not for sale","author":"Boutet A.","year":"2025","unstructured":"A. Boutet et al. ''I'm not for sale'' - perceptions and limited awareness of privacy risks by digital natives about location data. In AAAI, pages 277-288, 2025.","journal-title":"In AAAI, pages"},{"key":"e_1_3_2_1_9_1","first-page":"5053","volume-title":"USENIX Security","author":"Dhondt K.","year":"2024","unstructured":"K. Dhondt et al. Swipe left for identity theft: An analysis of user data privacy risks on location-based dating apps. In USENIX Security, pages 5053-5070, 2024."},{"key":"e_1_3_2_1_10_1","first-page":"253","volume-title":"ISSRE","author":"Fan M.","year":"2020","unstructured":"M. Fan et al. An empirical evaluation of GDPR compliance violations in Android mHealth apps. In ISSRE, pages 253-264, 2020."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"crossref","first-page":"203","DOI":"10.1145\/3374664.3375730","volume-title":"CODASPY","author":"Feichtner J.","year":"2020","unstructured":"J. Feichtner et al. Understanding privacy awareness in Android app descriptions using deep learning. In CODASPY, pages 203-214, 2020."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2912210"},{"key":"e_1_3_2_1_13_1","first-page":"2817","volume-title":"IEEE SP","author":"Ferreira M.","year":"2023","unstructured":"M. Ferreira et al. RuleKeeper: GDPR-aware personal data compliance for web frameworks. In IEEE SP, pages 2817-2834, 2023."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","first-page":"22167","DOI":"10.1109\/ACCESS.2024.3364533","article-title":"Leveraging NLP techniques for privacy requirements engineering in user stories","volume":"12","author":"Herwanto G. B.","year":"2024","unstructured":"G. B. Herwanto et al. Leveraging NLP techniques for privacy requirements engineering in user stories. IEEE Access, 12:22167-22189, 2024.","journal-title":"IEEE Access"},{"key":"e_1_3_2_1_15_1","volume-title":"A survey on interdependent privacy. ACM Comput. Surv., 52(6)","author":"Humbert M.","year":"2019","unstructured":"M. Humbert et al. A survey on interdependent privacy. ACM Comput. Surv., 52(6), 2019."},{"key":"e_1_3_2_1_16_1","first-page":"137","volume-title":"WASA","author":"Jia Q.","year":"2019","unstructured":"Q. Jia et al. Who leaks my privacy: Towards automatic and association detection with GDPR compliance. In WASA, pages 137-148, 2019."},{"key":"e_1_3_2_1_17_1","first-page":"5467","volume-title":"USENIX Security","author":"Koch S.","year":"2023","unstructured":"S. Koch et al. The OK is not enough: A large scale study of consent dialogs in smartphone applications. In USENIX Security, pages 5467-5484, 2023."},{"key":"e_1_3_2_1_18_1","volume-title":"SOUPS","author":"Kollnig K.","year":"2021","unstructured":"K. Kollnig et al. A fait accompli? an empirical study into the absence of consent to third-party tracking in android apps. In SOUPS, 2021."},{"issue":"2","key":"e_1_3_2_1_19_1","doi-asserted-by":"crossref","DOI":"10.14763\/2024.2.1757","article-title":"The death of privacy policies: How app stores shape GDPR compliance of apps","volume":"13","author":"Kr\u00e4mer J.","year":"2024","unstructured":"J. Kr\u00e4mer. The death of privacy policies: How app stores shape GDPR compliance of apps. Internet Policy Review, 13(2), 2024.","journal-title":"Internet Policy Review"},{"key":"e_1_3_2_1_20_1","first-page":"1581","volume-title":"CCS","author":"Li S.","year":"2024","unstructured":"S. Li et al. Are we getting well-informed? an in-depth study of runtime privacy notice practice in mobile apps. In CCS, pages 1581-1595, 2024."},{"key":"e_1_3_2_1_21_1","volume-title":"USENIX Security","author":"Liu D.","year":"2024","unstructured":"D. Liu et al. ihunter: Hunting privacy violations at scale in the software supply chain on iOS. In USENIX Security, 2024."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"crossref","first-page":"280","DOI":"10.56553\/popets-2024-0016","article-title":"Opted out, yet tracked: Are regulations enough to protect your privacy?","volume":"2024","author":"Liu Z.","year":"2024","unstructured":"Z. Liu et al. Opted out, yet tracked: Are regulations enough to protect your privacy? POPETs, 2024:280-299, 01 2024.","journal-title":"POPETs"},{"key":"e_1_3_2_1_23_1","volume-title":"Heterogeneous Data Management, Polystores, and Analytics for Healthcare, page 82\u201395","author":"Mohan J.","year":"2022","unstructured":"J. Mohan et al. Analyzing GDPR compliance through the lens of privacy policy. In Heterogeneous Data Management, Polystores, and Analytics for Healthcare, page 82\u201395, 2022."},{"key":"e_1_3_2_1_24_1","first-page":"228","volume-title":"IEEE Security and Privacy Workshops","author":"Mohanty A.","year":"2021","unstructured":"A. Mohanty et al. Hybridiagnostics: Evaluating security issues in hybrid smarthome companion apps. In IEEE Security and Privacy Workshops, pages 228-234, 2021."},{"key":"e_1_3_2_1_25_1","volume-title":"DBSec, page 162\u2013182","author":"Neupane S.","year":"2022","unstructured":"S. Neupane et al. On the data privacy, security, and risk postures of iot mobile companion apps. In DBSec, page 162\u2013182, 2022."},{"key":"e_1_3_2_1_26_1","volume-title":"USENIX Security, page 3667\u20133684","author":"Nguyen T. T.","year":"2021","unstructured":"T. T. Nguyen et al. Share first, ask later (or never?) studying violations of GDPRtextquoterights explicit consent in android apps. In USENIX Security, page 3667\u20133684, 2021."},{"key":"e_1_3_2_1_27_1","volume-title":"CCS, page 2369\u20132383","author":"Nguyen T. T.","year":"2022","unstructured":"T. T. Nguyen et al. Freely given consent? studying consent notice of third-party tracking and its violations of GDPR in Android apps. In CCS, page 2369\u20132383, 2022."},{"key":"e_1_3_2_1_28_1","first-page":"119","article-title":"Privacy as contextual integrity","volume":"79","author":"Nissenbaum H.","year":"2004","unstructured":"H. Nissenbaum. Privacy as contextual integrity. Wash. L. Rev., 79:119, 2004.","journal-title":"Wash. L. Rev."},{"key":"e_1_3_2_1_29_1","volume-title":"USENIX Security, page 527\u2013542","author":"Pandita R.","year":"2013","unstructured":"R. Pandita et al. WHYPER: towards automating risk assessment of mobile applications. In USENIX Security, page 527\u2013542, 2013."},{"key":"e_1_3_2_1_30_1","volume-title":"Detecting compliance of privacy policies with data protection laws. CoRR, abs\/2102.12362","author":"Qamar A.","year":"2021","unstructured":"A. Qamar et al. Detecting compliance of privacy policies with data protection laws. CoRR, abs\/2102.12362, 2021."},{"key":"e_1_3_2_1_31_1","volume-title":"CCS, page 1354\u20131365","author":"Qu Z.","year":"2014","unstructured":"Z. Qu et al. Autocog: Measuring the description-to-permission fidelity in android applications. In CCS, page 1354\u20131365, 2014."},{"key":"e_1_3_2_1_32_1","volume-title":"Workshop on Technology and Consumer Protection","author":"Reyes I.","year":"2017","unstructured":"I. Reyes et al. ''Is our children's apps learning?'' automatically detecting coppa violations. In Workshop on Technology and Consumer Protection, 2017."},{"key":"e_1_3_2_1_33_1","first-page":"63","article-title":"Won't somebody think of the children?","author":"Reyes I.","year":"2018","unstructured":"I. Reyes et al. ''Won't somebody think of the children?'' examining COPPA compliance at scale. POPETs, pages 63-83, 2018.","journal-title":"POPETs, pages"},{"key":"e_1_3_2_1_34_1","first-page":"203","volume-title":"DbSec","author":"Sassetti G.","year":"2023","unstructured":"G. Sassetti et al. Assurance, consent and access control for privacy-aware OIDC deployments. In DbSec, pages 203-222, 2023."},{"key":"e_1_3_2_1_35_1","first-page":"2459","volume-title":"CCS","author":"Schmidt D.","year":"2025","unstructured":"D. Schmidt et al. Leaky apps: Large-scale analysis of secrets distributed in android and ios apps. In CCS, pages 2459-2473, 2025."},{"key":"e_1_3_2_1_36_1","volume-title":"A technical look at the indian personal data protection bill. CoRR, abs\/2005.13812","author":"Singh R. G.","year":"2020","unstructured":"R. G. Singh et al. A technical look at the indian personal data protection bill. CoRR, abs\/2005.13812, 2020."},{"key":"e_1_3_2_1_37_1","first-page":"3373","volume-title":"CCS","author":"Xiang A.","year":"2023","unstructured":"A. Xiang et al. PolicyChecker: Analyzing the GDPR completeness of mobile apps' privacy policies. In CCS, pages 3373-3387, 2023."},{"key":"e_1_3_2_1_38_1","first-page":"197","volume-title":"SOUPS","author":"L.","year":"2021","unstructured":"L. Zhang-Kennedy et al. ''Whether it's moral is a whole other story'': Consumer perspectives on privacy regulations and corporate data practices. In SOUPS, pages 197-216, 2021."},{"key":"e_1_3_2_1_39_1","volume-title":"NDSS","author":"Zimmeck S.","year":"2017","unstructured":"S. Zimmeck et al. Automated analysis of privacy requirements for mobile apps. In NDSS, 2017."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"crossref","first-page":"66","DOI":"10.2478\/popets-2019-0037","article-title":"Maps: Scaling privacy compliance analysis to a million apps","volume":"2019","author":"Zimmeck S.","year":"2019","unstructured":"S. Zimmeck et al. Maps: Scaling privacy compliance analysis to a million apps. POPETs, 2019:66-86, 2019.","journal-title":"POPETs"},{"key":"e_1_3_2_1_41_1","first-page":"47","article-title":"Revoked just now!","volume":"2023","author":"Zufferey N.","year":"2023","unstructured":"N. Zufferey et al. ''Revoked just now!'' Users' behaviors toward fitness-data sharing with third-party applications. POPETs, 2023:47-67, 2023.","journal-title":"POPETs"}],"event":{"name":"CODASPY '26: Sixteenth ACM Conference on Data and Application Security and Privacy","location":"Frankfurt am Main Germany","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the Sixteenth ACM Conference on Data and Application Security and Privacy"],"original-title":[],"deposited":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T16:27:14Z","timestamp":1781281634000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3800506.3803491"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,22]]},"references-count":41,"alternative-id":["10.1145\/3800506.3803491","10.1145\/3800506"],"URL":"https:\/\/doi.org\/10.1145\/3800506.3803491","relation":{},"subject":[],"published":{"date-parts":[[2026,6,22]]},"assertion":[{"value":"2026-06-22","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}