{"id":"https://openalex.org/W2962993091","doi":"https://doi.org/10.2824/38623","title":"Privacy and Data Protection by Design - from policy to engineering","display_name":"Privacy and Data Protection by Design - from policy to engineering","publication_year":2014,"publication_date":"2014-01-01","ids":{"openalex":"https://openalex.org/W2962993091","doi":"https://doi.org/10.2824/38623","mag":"2962993091"},"language":"en","primary_location":{"id":"pmh:oai:eprints.ucl.ac.uk.OAI2:1463998","doi":null,"is_oa":false,"landing_page_url":"https://discovery.ucl.ac.uk/id/eprint/1463998/","pdf_url":null,"source":{"id":"https://openalex.org/S4306400024","display_name":"UCL Discovery (University College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I45129253","host_organization_name":"University College London","host_organization_lineage":["https://openalex.org/I45129253"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"European Union Agency for Network and Information Security (ENISA): Heraklion, Greece.","raw_type":"Report"},"volume":null,"type":"report","is_traditional":false,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033480395","display_name":"George Danezis","orcid":"https://orcid.org/0000-0002-8923-4860","observed_orcids":["https://orcid.org/0000-0002-8923-4860"]},"institutions":[{"id":"https://openalex.org/I135458274","display_name":"Citigroup","ror":"https://ror.org/032xgdx47","country_code":"US","type":"other","lineage":["https://openalex.org/I135458274"]},{"id":"https://openalex.org/I4405259506","display_name":"PRIVATICS: Mod\u00e8les, architectures et outils pour la protection de la vie priv\u00e9e dans la soci\u00e9t\u00e9 de l'information","ror":"https://ror.org/02b3vs478","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1326498283","https://openalex.org/I4210101348","https://openalex.org/I4394709170","https://openalex.org/I4405259506"]},{"id":"https://openalex.org/I4405285103","display_name":"Center of Innovation in Telecommunications and Integration of Service","ror":"https://ror.org/04sg00p82","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1326498283","https://openalex.org/I203339264","https://openalex.org/I4405285103","https://openalex.org/I48430043"]}],"countries":["FR","US"],"is_corresponding":false,"raw_author_name":"Danezis, G","raw_affiliation_strings":["CITI Centre of Innovation in Telecommunications and Integration of services","Privacy Models, Architectures and Tools for the Information Society"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CITI Centre of Innovation in Telecommunications and Integration of services","institution_ids":["https://openalex.org/I135458274","https://openalex.org/I4405285103"]},{"raw_affiliation_string":"Privacy Models, Architectures and Tools for the Information Society","institution_ids":["https://openalex.org/I4405259506"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Domingo-Ferrer, J","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Domingo-Ferrer, J","raw_affiliation_strings":["Department of Computer science [University College of London]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer science [University College of London]","institution_ids":["https://openalex.org/I45129253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009359695","display_name":"Marit Hansen","orcid":"https://orcid.org/0000-0003-2169-5537","observed_orcids":["https://orcid.org/0000-0003-2169-5537"]},"institutions":[{"id":"https://openalex.org/I4210094001","display_name":"Independent Centre for Privacy Protection","ror":"https://ror.org/01fn48q65","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210094001"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Hansen, M","raw_affiliation_strings":["Unabh\u00e4ngiges Landeszentrum f\u00fcr Datenschutz Schleswig-Holstein [Kiel, Germany]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Unabh\u00e4ngiges Landeszentrum f\u00fcr Datenschutz Schleswig-Holstein [Kiel, Germany]","institution_ids":["https://openalex.org/I4210094001"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008216815","display_name":"Jaap-Henk Hoepman","orcid":"https://orcid.org/0000-0003-4234-1578","observed_orcids":["https://orcid.org/0000-0003-4234-1578"]},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Hoepman, JH","raw_affiliation_strings":["Institute for Computing and Information Sciences [Nijmegen]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Computing and Information Sciences [Nijmegen]","institution_ids":["https://openalex.org/I145872427"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Metayer, DL","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Metayer, DL","raw_affiliation_strings":["Catholic University of Leuven - Katholieke Universiteit Leuven"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Catholic University of Leuven - Katholieke Universiteit Leuven","institution_ids":["https://openalex.org/I99464096"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087435027","display_name":"Rodica Tirtea","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1295585255","display_name":"European Union Agency for Network and Information Security","ror":"https://ror.org/00wqx6897","country_code":"GR","type":"government","lineage":["https://openalex.org/I1295585255","https://openalex.org/I1320481043"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Tirtea, R","raw_affiliation_strings":["European Union Agency for Network and Information Security [Heraklion]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"European Union Agency for Network and Information Security [Heraklion]","institution_ids":["https://openalex.org/I1295585255"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033291024","display_name":"Stefan Schiffner","orcid":"https://orcid.org/0000-0003-2461-1482","observed_orcids":["https://orcid.org/0000-0003-2461-1482"]},"institutions":[{"id":"https://openalex.org/I55952717","display_name":"Universitat Rovira i Virgili","ror":"https://ror.org/00g5sqv46","country_code":"ES","type":"education","lineage":["https://openalex.org/I55952717"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Schiffner, S","raw_affiliation_strings":["Universitat Rovira i Virgili"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universitat Rovira i Virgili","institution_ids":["https://openalex.org/I55952717"]}]}],"institutions":[],"countries_distinct_count":8,"institutions_distinct_count":9,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":92,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.7461000084877014,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.7461000084877014,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.21899999678134918,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13364","display_name":"Digitalization, Law, and Regulation","score":0.009499999694526196,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/privacy-by-design","display_name":"privacy by design","score":0.906000018119812},{"id":"https://openalex.org/keywords/data-protection","display_name":"data protection","score":0.871999979019165},{"id":"https://openalex.org/keywords/privacy-enhancing-technologies","display_name":"privacy-enhancing technologies","score":0.9950000047683716},{"id":"https://openalex.org/keywords/data-governance","display_name":"data governance","score":0.8769999742507935},{"id":"https://openalex.org/keywords/privacy-requirements","display_name":"privacy requirements","score":0.6150000095367432},{"id":"https://openalex.org/keywords/system-design","display_name":"system design","score":0.5609999895095825},{"id":"https://openalex.org/keywords/data-protection-law","display_name":"data protection law","score":0.5920000076293945}],"concepts":[{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.6044725775718689},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5268829464912415},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4124106764793396},{"id":"https://openalex.org/C3017597292","wikidata":"https://www.wikidata.org/wiki/Q25052250","display_name":"Privacy protection","level":2,"score":0.41130366921424866},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.41041332483291626}],"mesh":[],"locations_count":4,"locations":[{"id":"pmh:oai:eprints.ucl.ac.uk.OAI2:1463998","doi":null,"is_oa":false,"landing_page_url":"https://discovery.ucl.ac.uk/id/eprint/1463998/","pdf_url":null,"source":{"id":"https://openalex.org/S4306400024","display_name":"UCL Discovery (University College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I45129253","host_organization_name":"University College London","host_organization_lineage":["https://openalex.org/I45129253"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"European Union Agency for Network and Information Security (ENISA): Heraklion, Greece.","raw_type":"Report"},{"id":"pmh:oai:orbilu.uni.lu:10993/33355","doi":null,"is_oa":false,"landing_page_url":"https://orbilu.uni.lu/handle/10993/33355","pdf_url":null,"source":{"id":"https://openalex.org/S4306401815","display_name":"Open Repository and Bibliography (University of Luxembourg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I186903577","host_organization_name":"University of Luxembourg","host_organization_lineage":["https://openalex.org/I186903577"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/report"},{"id":"pmh:oai:repository.ubn.ru.nl:2066/138575","doi":"https://doi.org/10.2824/38623","is_oa":false,"landing_page_url":"http://hdl.handle.net/2066/138575","pdf_url":null,"source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"External research report"},{"id":"pmh:ru:oai:repository.ubn.ru.nl:2066/138575","doi":"https://doi.org/10.2824/38623","is_oa":false,"landing_page_url":"http://hdl.handle.net/2066/138575","pdf_url":null,"source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"TP-05-14-111-EN-N ; TP-05-14-111-EN-N. Heraklion : European Union Agency for Network and Information Security","raw_type":"info:eu-repo/semantics/report"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, justice, and strong institutions","score":0.8046000003814697,"id":"https://metadata.un.org/sdg/16"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":115,"referenced_works":["https://openalex.org/W8287904","https://openalex.org/W47288598","https://openalex.org/W50149037","https://openalex.org/W136519170","https://openalex.org/W150223756","https://openalex.org/W154280562","https://openalex.org/W164911551","https://openalex.org/W172617263","https://openalex.org/W238547351","https://openalex.org/W601886372","https://openalex.org/W952390951","https://openalex.org/W1460941824","https://openalex.org/W1480225633","https://openalex.org/W1494538302","https://openalex.org/W1494929562","https://openalex.org/W1497439563","https://openalex.org/W1515136553","https://openalex.org/W1517333100","https://openalex.org/W1522359820","https://openalex.org/W1524103604","https://openalex.org/W1528076390","https://openalex.org/W1530664329","https://openalex.org/W1539137932","https://openalex.org/W1546885574","https://openalex.org/W1553068910","https://openalex.org/W1564566774","https://openalex.org/W1572294630","https://openalex.org/W1572847001","https://openalex.org/W1572969502","https://openalex.org/W1574195238","https://openalex.org/W1587950788","https://openalex.org/W1590671143","https://openalex.org/W1601001795","https://openalex.org/W1603096728","https://openalex.org/W1649645444","https://openalex.org/W1655958391","https://openalex.org/W1731719946","https://openalex.org/W1887093900","https://openalex.org/W1912305484","https://openalex.org/W1933938106","https://openalex.org/W1963971515","https://openalex.org/W1977056427","https://openalex.org/W1978884755","https://openalex.org/W1987593503","https://openalex.org/W1994311880","https://openalex.org/W1996360405","https://openalex.org/W2009806762","https://openalex.org/W2016443801","https://openalex.org/W2025267317","https://openalex.org/W2030112111","https://openalex.org/W2031533839","https://openalex.org/W2031618446","https://openalex.org/W2035437115","https://openalex.org/W2035760319","https://openalex.org/W2042908342","https://openalex.org/W2045134072","https://openalex.org/W2050906581","https://openalex.org/W2052987781","https://openalex.org/W2056201098","https://openalex.org/W2064200206","https://openalex.org/W2066266646","https://openalex.org/W2076350413","https://openalex.org/W2080911030","https://openalex.org/W2083122891","https://openalex.org/W2093211096","https://openalex.org/W2102091280","https://openalex.org/W2103647628","https://openalex.org/W2107689334","https://openalex.org/W2108834246","https://openalex.org/W2112876561","https://openalex.org/W2121423622","https://openalex.org/W2125657162","https://openalex.org/W2126193037","https://openalex.org/W2128714691","https://openalex.org/W2128906841","https://openalex.org/W2129426180","https://openalex.org/W2129751437","https://openalex.org/W2131906261","https://openalex.org/W2132172731","https://openalex.org/W2133835346","https://openalex.org/W2135300639","https://openalex.org/W2135930857","https://openalex.org/W2137180374","https://openalex.org/W2138520657","https://openalex.org/W2139088804","https://openalex.org/W2139336600","https://openalex.org/W2141420453","https://openalex.org/W2146526603","https://openalex.org/W2146935111","https://openalex.org/W2147929033","https://openalex.org/W2150248082","https://openalex.org/W2152516507","https://openalex.org/W2153253414","https://openalex.org/W2154950939","https://openalex.org/W2157604883","https://openalex.org/W2159024459","https://openalex.org/W2161650208","https://openalex.org/W2163795263","https://openalex.org/W2164572628","https://openalex.org/W2165210192","https://openalex.org/W2171708692","https://openalex.org/W2182319922","https://openalex.org/W2183361331","https://openalex.org/W2253805791","https://openalex.org/W2266218113","https://openalex.org/W2293598903","https://openalex.org/W2341111334","https://openalex.org/W2405832514","https://openalex.org/W2579030831","https://openalex.org/W2604516070","https://openalex.org/W2911978475","https://openalex.org/W2944132414","https://openalex.org/W2970097841","https://openalex.org/W2990399857","https://openalex.org/W6922108917"],"related_works":["https://openalex.org/W4400049848","https://openalex.org/W4407915851","https://openalex.org/W2802752330","https://openalex.org/W4416549509","https://openalex.org/W3047678367","https://openalex.org/W2899423926","https://openalex.org/W2897018800","https://openalex.org/W6902227140","https://openalex.org/W3006574356","https://openalex.org/W1587950788"],"abstract_inverted_index":{"Privacy":[0],"and":[1,9,61,82,97,126,142,153,178,223],"data":[2,98,107],"protection":[3],"constitute":[4],"core":[5],"values":[6,22],"of":[7,10,17,36,136,146,149,160,212],"individuals":[8],"democratic":[11],"societies.":[12],"There":[13],"have":[14,77],"been":[15,57],"decades":[16],"debate":[18],"on":[19,219],"how":[20,220],"those":[21],"-and":[23],"legal":[24,124,187],"obligations-":[25],"can":[26],"be":[27,103,111],"embedded":[28],"into":[29],"systems,":[30],"preferably":[31],"from":[32,67,151,156],"the":[33,37,120,123,127,157,161,194,203,208,213],"very":[34],"beginning":[35],"design":[38,140,173,190],"process.":[39],"One":[40],"important":[41,163],"element":[42],"in":[43,62,86,105,113],"this":[44],"endeavour":[45],"are":[46,165],"technical":[47,143],"mechanisms,":[48],"known":[49],"as":[50,167],"privacy-enhancing":[51],"technologies":[52],"(PETs).":[53],"Their":[54],"effectiveness":[55],"has":[56],"demonstrated":[58],"by":[59,132],"researchers":[60],"pilot":[63],"implementations.":[64],"However,":[65],"apart":[66],"a":[68,80,106,168,172,183],"few":[69],"exceptions,":[70],"e.g.,":[71],"encryption":[72],"became":[73],"widely":[74,83],"used,":[75],"PETs":[76,100],"not":[78],"become":[79],"standard":[81],"used":[84],"component":[85],"system":[87,195],"design.":[88],"Furthermore,":[89,207],"for":[90,95,175,201],"unfolding":[91],"their":[92],"full":[93],"benefit":[94],"privacy":[96,139,158,205],"protection,":[99],"need":[101],"to":[102,110,118,185,189,197,221],"rooted":[104],"governance":[108],"strategy":[109],"applied":[112],"practice.":[114],"This":[115],"report":[116,181,209],"contributes":[117],"bridging":[119],"gap":[121],"between":[122],"framework":[125],"available":[128],"technological":[129],"implementation":[130],"measures":[131],"providing":[133],"an":[134],"inventory":[135],"existing":[137],"approaches,":[138],"strategies,":[141,191],"building":[144],"blocks":[145],"various":[147],"degrees":[148],"maturity":[150],"research":[152],"development.":[154],"Starting":[155],"principles":[159],"legislation,":[162],"elements":[164],"presented":[166],"first":[169],"step":[170],"towards":[171],"process":[174],"privacy-friendly":[176],"systems":[177],"services.":[179],"The":[180],"sketches":[182],"method":[184],"map":[186],"obligations":[188],"which":[192],"allow":[193],"designer":[196],"select":[198],"appropriate":[199],"techniques":[200],"implementing":[202],"identified":[204],"requirements.":[206],"reflects":[210],"limitations":[211],"approach.":[214],"It":[215],"concludes":[216],"with":[217],"recommendations":[218],"overcome":[222],"mitigate":[224],"these":[225],"limits.":[226]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":14},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":11},{"year":2019,"cited_by_count":14},{"year":2018,"cited_by_count":11},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2025-10-10T00:00:00"}