{"id":"https://openalex.org/W2899634604","doi":"https://doi.org/10.20897/jisem/3941","title":"GDPR Compliance in SMEs: There is much to be done","display_name":"GDPR Compliance in SMEs: There is much to be done","publication_year":2018,"publication_date":"2018-11-10","ids":{"openalex":"https://openalex.org/W2899634604","doi":"https://doi.org/10.20897/jisem/3941","mag":"2899634604"},"language":"en","primary_location":{"id":"doi:10.20897/jisem/3941","doi":"https://doi.org/10.20897/jisem/3941","is_oa":true,"landing_page_url":"https://doi.org/10.20897/jisem/3941","pdf_url":"https://www.jisem-journal.com/download/gdpr-compliance-in-smes-there-is-much-to-be-done-3941.pdf","source":{"id":"https://openalex.org/S2737791640","display_name":"Journal of Information Systems Engineering & Management","issn_l":"2468-4376","issn":["2468-4376","2468-2071"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":"https://openalex.org/P4310320063","host_organization_name":"Lectito Journals","host_organization_lineage":["https://openalex.org/P4310320063"],"host_organization_lineage_names":["Lectito Journals"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Information Systems Engineering & Management","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://www.jisem-journal.com/download/gdpr-compliance-in-smes-there-is-much-to-be-done-3941.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Maria da Concei\u00e7\u00e3o Freitas","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I141596103","display_name":"University of Lisbon","ror":"https://ror.org/01c27hj86","country_code":"PT","type":"education","lineage":["https://openalex.org/I141596103"]},{"id":"https://openalex.org/I4387152517","display_name":"Instituto Superior T\u00e9cnico","ror":"https://ror.org/03db2by73","country_code":"PT","type":"education","lineage":["https://openalex.org/I141596103","https://openalex.org/I4387152517"]}],"countries":["PT"],"is_corresponding":true,"raw_author_name":"Maria da Concei\u00e7\u00e3o Freitas","raw_affiliation_strings":["Instituto Superior T\u00e9cnico, Universidade de Lisboa, Lisboa, PORTUGAL"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Instituto Superior T\u00e9cnico, Universidade de Lisboa, Lisboa, PORTUGAL","institution_ids":["https://openalex.org/I141596103","https://openalex.org/I4387152517"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5020564170","display_name":"Miguel Mira da Silva","orcid":"https://orcid.org/0000-0002-0489-4465","observed_orcids":["https://orcid.org/0000-0002-0489-4465"]},"institutions":[{"id":"https://openalex.org/I141596103","display_name":"University of Lisbon","ror":"https://ror.org/01c27hj86","country_code":"PT","type":"education","lineage":["https://openalex.org/I141596103"]},{"id":"https://openalex.org/I4387152517","display_name":"Instituto Superior T\u00e9cnico","ror":"https://ror.org/03db2by73","country_code":"PT","type":"education","lineage":["https://openalex.org/I141596103","https://openalex.org/I4387152517"]}],"countries":["PT"],"is_corresponding":true,"raw_author_name":"Miguel Mira da Silva","raw_affiliation_strings":["Instituto Superior T\u00e9cnico, Universidade de Lisboa, Lisboa, PORTUGAL"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Instituto Superior T\u00e9cnico, Universidade de Lisboa, Lisboa, PORTUGAL","institution_ids":["https://openalex.org/I141596103","https://openalex.org/I4387152517"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5020564170"],"corresponding_institution_ids":["https://openalex.org/I141596103","https://openalex.org/I4387152517"],"apc_list":null,"apc_paid":null,"fwci":48.4462,"has_fulltext":true,"cited_by_count":52,"citation_normalized_percentile":{"value":0.99696211,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"3","issue":"4","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13364","display_name":"Digitalization, Law, and Regulation","score":0.9740999937057495,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T13364","display_name":"Digitalization, Law, and Regulation","score":0.9740999937057495,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.012299999594688416,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T13616","display_name":"Governance, Compliance, and Sustainability","score":0.0017000000225380063,"subfield":{"id":"https://openalex.org/subfields/1408","display_name":"Strategy and Management"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/gdpr-compliance","display_name":"GDPR compliance","score":0.843999981880188},{"id":"https://openalex.org/keywords/general-data-protection-regulation","display_name":"General Data Protection Regulation","score":0.9319999814033508},{"id":"https://openalex.org/keywords/small-and-medium-sized-enterprises","display_name":"small and medium-sized enterprises","score":0.996999979019165},{"id":"https://openalex.org/keywords/personal-data-protection","display_name":"personal data protection","score":0.9810000061988831},{"id":"https://openalex.org/keywords/data-protection-law","display_name":"data protection law","score":0.6710000038146973},{"id":"https://openalex.org/keywords/regulatory-fines","display_name":"regulatory fines","score":0.6110000014305115},{"id":"https://openalex.org/keywords/manufacturing-smes","display_name":"manufacturing SMEs","score":0.7580000162124634},{"id":"https://openalex.org/keywords/legal-awareness","display_name":"legal awareness","score":0.4729999899864197}],"concepts":[{"id":"https://openalex.org/C2777351106","wikidata":"https://www.wikidata.org/wiki/Q49371","display_name":"Legislation","level":2,"score":0.8853288888931274},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.7597153186798096},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.7339491844177246},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.6050481200218201},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.5533245205879211},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.5404409766197205},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.44942402839660645},{"id":"https://openalex.org/C2777855551","wikidata":"https://www.wikidata.org/wiki/Q12310021","display_name":"Subject (documents)","level":2,"score":0.4445452392101288},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.4183381199836731},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.41711336374282837},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.41041240096092224},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.18554764986038208},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.14296093583106995},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.1276845932006836},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.11652901768684387},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.07354715466499329},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C161191863","wikidata":"https://www.wikidata.org/wiki/Q199655","display_name":"Library science","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.20897/jisem/3941","doi":"https://doi.org/10.20897/jisem/3941","is_oa":true,"landing_page_url":"https://doi.org/10.20897/jisem/3941","pdf_url":"https://www.jisem-journal.com/download/gdpr-compliance-in-smes-there-is-much-to-be-done-3941.pdf","source":{"id":"https://openalex.org/S2737791640","display_name":"Journal of Information Systems Engineering & Management","issn_l":"2468-4376","issn":["2468-4376","2468-2071"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":"https://openalex.org/P4310320063","host_organization_name":"Lectito Journals","host_organization_lineage":["https://openalex.org/P4310320063"],"host_organization_lineage_names":["Lectito Journals"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Information Systems Engineering & Management","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:95daeed4c9f24e228a329592115fead4","doi":null,"is_oa":true,"landing_page_url":"https://doaj.org/article/95daeed4c9f24e228a329592115fead4","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Information Systems Engineering & Management, Vol 3, Iss 4, Pp - (2018)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.20897/jisem/3941","doi":"https://doi.org/10.20897/jisem/3941","is_oa":true,"landing_page_url":"https://doi.org/10.20897/jisem/3941","pdf_url":"https://www.jisem-journal.com/download/gdpr-compliance-in-smes-there-is-much-to-be-done-3941.pdf","source":{"id":"https://openalex.org/S2737791640","display_name":"Journal of Information Systems Engineering & Management","issn_l":"2468-4376","issn":["2468-4376","2468-2071"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":"https://openalex.org/P4310320063","host_organization_name":"Lectito Journals","host_organization_lineage":["https://openalex.org/P4310320063"],"host_organization_lineage_names":["Lectito Journals"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Information Systems Engineering & Management","raw_type":"journal-article"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[{"id":"https://metadata.un.org/sdg/8","score":0.5600000023841858,"display_name":"Decent work and economic growth"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2899634604.pdf","grobid_xml":"https://content.openalex.org/works/W2899634604.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W2008201588","https://openalex.org/W2105263530","https://openalex.org/W2121140841","https://openalex.org/W2300106907","https://openalex.org/W2542786524","https://openalex.org/W2563395621","https://openalex.org/W2611687401","https://openalex.org/W2742660493","https://openalex.org/W2748320041","https://openalex.org/W2783281265","https://openalex.org/W2787315573","https://openalex.org/W2791737564","https://openalex.org/W2810771022","https://openalex.org/W3170684971","https://openalex.org/W6637626135","https://openalex.org/W6797064217"],"related_works":["https://openalex.org/W2810771022","https://openalex.org/W4285502357","https://openalex.org/W3181597401","https://openalex.org/W2954168867","https://openalex.org/W2972436523","https://openalex.org/W2952163446","https://openalex.org/W4390549387","https://openalex.org/W4318621715","https://openalex.org/W2888134164","https://openalex.org/W3093827912"],"abstract_inverted_index":{"The":[0,144],"obligatory":[1],"adaptation":[2],"of":[3,18,32,37,59,153,155],"Organizations":[4,33,67,80],"to":[5,65,70,83,116,122,128,162,169,173,176],"the":[6,29,50,54,57,62,66,78,119],"General":[7],"Data":[8,164],"Protection":[9],"Regulation":[10],"(EU)":[11],"2016/679":[12],"(GDPR),":[13],"will":[14],"imply":[15],"a":[16,25,35,87,95,171],"set":[17],"legal,":[19],"technological":[20],"and":[21,100,105,113,158],"functional":[22],"changes,":[23],"with":[24,41,77,124,140,178],"direct":[26],"impact":[27],"on":[28],"daily":[30],"life":[31],"as":[34],"result":[36],"their":[38,156],"increased":[39],"responsibility":[40],"data":[42],"protection":[43],"subjects":[44],"that":[45],"has":[46],"been":[47],"reinforced":[48],"by":[49],"new":[51,92],"legislation.":[52,79,125],"On":[53],"other":[55],"hand,":[56],"transfer":[58],"responsibilities":[60],"from":[61],"national":[63],"authorities":[64],"obliges":[68],"them":[69],"prove,":[71],"at":[72],"all":[73],"times,":[74],"full":[75],"compliance":[76],"are":[81,132],"subject":[82],"heavy":[84],"fines":[85],"when":[86],"non-compliance":[88],"is":[89,94,147,167],"detected.":[90],"This":[91],"reality":[93],"challenge":[96],"for":[97,103],"any":[98],"Organization,":[99],"in":[101,160],"particular":[102],"small":[104],"medium-sized":[106],"enterprises":[107],"(SMEs),":[108],"which":[109],"have":[110,136],"fewer":[111],"human":[112],"financial":[114],"resources":[115],"carry":[117],"out":[118],"necessary":[120],"measures":[121],"comply":[123,177],"In":[126],"order":[127],"know":[129],"how":[130],"SMEs":[131],"preparing":[133],"themselves,":[134],"we":[135],"conducted":[137],"face-to-face":[138],"interviews":[139],"ten":[141],"industrial":[142],"SMEs.":[143],"main":[145],"conclusion":[146],"that,":[148],"given":[149],"these":[150],"companies'":[151],"lack":[152],"awareness":[154],"obligations":[157],"duties":[159],"relation":[161],"Personal":[163],"Protection,":[165],"it":[166],"urgent":[168],"define":[170],"methodology":[172],"be":[174],"able":[175],"GDPR.":[179]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":12},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":1}],"updated_date":"2026-09-29T14:09:16.559479","created_date":"2018-11-16T00:00:00"}