{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,2]],"date-time":"2026-05-02T20:25:53Z","timestamp":1777753553152,"version":"3.51.4"},"reference-count":9,"publisher":"SAGE Publications","issue":"1-2","license":[{"start":{"date-parts":[[2021,12,27]],"date-time":"2021-12-27T00:00:00Z","timestamp":1640563200000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["ISU"],"published-print":{"date-parts":[[2021,12,27]]},"abstract":"<jats:p>Europe\u2019s General Data Protection Regulation (GDPR) has a fearsome reputation as \u201cthe law that can fine you \u20ac20 million.\u201d But behind that scary slogan lies a text that can be a very helpful guide to designing data processing systems. This paper explores that side of the GDPR: how understanding it can produce more effective - and more trustworthy - systems. Three popular myths often take designers down the wrong track: that GDPR is about stopping processing, is about users, and is about consent. Instead we consider, from a design perspective, the GDPR\u2019s source material, its Principles, and its Lawful Bases for processing. Three examples - from the field of education, but widely applicable - show how \u201cthinking with GDPR\u201d has improved both the effectiveness and safety of large-scale data processing systems.<\/jats:p>","DOI":"10.3233\/isu-210107","type":"journal-article","created":{"date-parts":[[2021,9,7]],"date-time":"2021-09-07T11:10:40Z","timestamp":1631013040000},"page":"61-69","source":"Crossref","is-referenced-by-count":0,"title":["Thinking with GDPR: A guide to better system design"],"prefix":"10.1177","volume":"41","author":[{"given":"Andrew","family":"Cormack","sequence":"first","affiliation":[{"name":"Chief Regulatory Adviser, Jisc, Lumen House, , , UK"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"179","reference":[{"key":"10.3233\/ISU-210107_ref1","unstructured":"Regulation 2016\/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data."},{"key":"10.3233\/ISU-210107_ref13","unstructured":"Directive 95\/46\/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data."},{"key":"10.3233\/ISU-210107_ref22","doi-asserted-by":"publisher","DOI":"10.29311\/jlthe.v1i2.2812"},{"key":"10.3233\/ISU-210107_ref23","doi-asserted-by":"crossref","DOI":"10.4324\/9781315679563","volume-title":"Learning Analytics Explained","author":"Sclater","year":"2017"},{"issue":"4","key":"10.3233\/ISU-210107_ref24","doi-asserted-by":"publisher","first-page":"e0231500","DOI":"10.1371\/journal.pone.0231500","article-title":"Propensity score adjustment using machine learning classification algorithms to control selection bias in online surveys","volume":"15","author":"Ferri-Garcia","year":"2020","journal-title":"PLoS One"},{"issue":"1","key":"10.3233\/ISU-210107_ref25","doi-asserted-by":"publisher","first-page":"91","DOI":"10.18608\/jla.2016.31.6","article-title":"A data protection framework for learning analytics","volume":"3","author":"Cormack","year":"2016","journal-title":"Journal of Learning Analytics"},{"issue":"2","key":"10.3233\/ISU-210107_ref26","doi-asserted-by":"publisher","first-page":"5","DOI":"10.18608\/jla.2015.22.2","article-title":"Why theory matters more than ever in the age of big data","volume":"2","author":"Wise","year":"2015","journal-title":"Journal of Learning Analytics"},{"key":"10.3233\/ISU-210107_ref27","doi-asserted-by":"publisher","DOI":"10.21039\/irpandp.v1i1.9"},{"key":"10.3233\/ISU-210107_ref28","doi-asserted-by":"crossref","first-page":"44","DOI":"10.1017\/CBO9781107590205.004","volume-title":"Privacy, Big Data and the Public Good","author":"Barocas","year":"2014"}],"container-title":["Information Services &amp; Use"],"original-title":[],"link":[{"URL":"https:\/\/content.iospress.com\/download?id=10.3233\/ISU-210107","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T12:03:09Z","timestamp":1777464189000},"score":1,"resource":{"primary":{"URL":"https:\/\/journals.sagepub.com\/doi\/full\/10.3233\/ISU-210107"}},"subtitle":[],"editor":[{"given":"Bonnie","family":"Lawlor","sequence":"additional","affiliation":[],"role":[{"role":"editor","vocabulary":"crossref"}]}],"short-title":[],"issued":{"date-parts":[[2021,12,27]]},"references-count":9,"journal-issue":{"issue":"1-2"},"URL":"https:\/\/doi.org\/10.3233\/isu-210107","relation":{},"ISSN":["0167-5265","1875-8789"],"issn-type":[{"value":"0167-5265","type":"print"},{"value":"1875-8789","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,12,27]]}}}