{"id":"https://openalex.org/W3207630504","doi":"https://doi.org/10.1109/rew53955.2021.00009","title":"A Model-based Conceptualization of Requirements for Compliance Checking of Data Processing against GDPR","display_name":"A Model-based Conceptualization of Requirements for Compliance Checking of Data Processing against GDPR","publication_year":2021,"publication_date":"2021-09-01","ids":{"openalex":"https://openalex.org/W3207630504","doi":"https://doi.org/10.1109/rew53955.2021.00009","mag":"3207630504"},"language":"en","primary_location":{"id":"doi:10.1109/rew53955.2021.00009","doi":"https://doi.org/10.1109/rew53955.2021.00009","is_oa":false,"landing_page_url":"https://doi.org/10.1109/rew53955.2021.00009","pdf_url":null,"source":{"id":"https://openalex.org/S7407087432","display_name":"IEEE International Requirements Engineering Conference Workshops (REW)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE 29th International Requirements Engineering Conference Workshops (REW)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://orbilu.uni.lu/bitstream/10993/48398/1/MoDRE21-AASB.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027277486","display_name":"Orlando Amaral","orcid":"https://orcid.org/0000-0001-5140-6439","observed_orcids":["https://orcid.org/0000-0001-5140-6439"]},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]},{"id":"https://openalex.org/I4405259781","display_name":"Interdisciplinary Centre for Security, Reliability and Trust","ror":"https://ror.org/02qav7c04","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Orlando Amaral","raw_affiliation_strings":["SnT, University of Luxembourg, Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SnT, University of Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063256854","display_name":"Sallam Abualhaija","orcid":"https://orcid.org/0000-0001-6095-447X","observed_orcids":["https://orcid.org/0000-0001-6095-447X"]},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]},{"id":"https://openalex.org/I4405259781","display_name":"Interdisciplinary Centre for Security, Reliability and Trust","ror":"https://ror.org/02qav7c04","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Sallam Abualhaija","raw_affiliation_strings":["SnT, University of Luxembourg, Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SnT, University of Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022905724","display_name":"Mehrdad Sabetzadeh","orcid":"https://orcid.org/0000-0002-4711-8319","observed_orcids":["https://orcid.org/0000-0002-4711-8319"]},"institutions":[{"id":"https://openalex.org/I153718931","display_name":"University of Ottawa","ror":"https://ror.org/03c4mmv16","country_code":"CA","type":"education","lineage":["https://openalex.org/I153718931"]},{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]},{"id":"https://openalex.org/I4405259781","display_name":"Interdisciplinary Centre for Security, Reliability and Trust","ror":"https://ror.org/02qav7c04","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}],"countries":["CA","LU"],"is_corresponding":false,"raw_author_name":"Mehrdad Sabetzadeh","raw_affiliation_strings":["School of EECS, University of Ottawa, Canada","SnT, University of Luxembourg, Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of EECS, University of Ottawa, Canada","institution_ids":["https://openalex.org/I153718931"]},{"raw_affiliation_string":"SnT, University of Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078533117","display_name":"Lionel Briand","orcid":"https://orcid.org/0000-0002-1393-1010","observed_orcids":["https://orcid.org/0000-0002-1393-1010"]},"institutions":[{"id":"https://openalex.org/I153718931","display_name":"University of Ottawa","ror":"https://ror.org/03c4mmv16","country_code":"CA","type":"education","lineage":["https://openalex.org/I153718931"]},{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]},{"id":"https://openalex.org/I4405259781","display_name":"Interdisciplinary Centre for Security, Reliability and Trust","ror":"https://ror.org/02qav7c04","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}],"countries":["CA","LU"],"is_corresponding":false,"raw_author_name":"Lionel Briand","raw_affiliation_strings":["School of EECS, University of Ottawa, Canada","SnT, University of Luxembourg, Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of EECS, University of Ottawa, Canada","institution_ids":["https://openalex.org/I153718931"]},{"raw_affiliation_string":"SnT, University of Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":33.1299,"has_fulltext":true,"cited_by_count":20,"citation_normalized_percentile":{"value":0.99703264,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"16","last_page":"20"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13364","display_name":"Digitalization, Law, and Regulation","score":0.7914999723434448,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T13364","display_name":"Digitalization, Law, and Regulation","score":0.7914999723434448,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.07729999721050262,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T13643","display_name":"Artificial Intelligence in Law","score":0.04050000011920929,"subfield":{"id":"https://openalex.org/subfields/3320","display_name":"Political Science and International Relations"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/gdpr","display_name":"GDPR","score":0.6769999861717224},{"id":"https://openalex.org/keywords/data-processing-agreements","display_name":"data processing agreements","score":0.6819999814033508},{"id":"https://openalex.org/keywords/compliance-checking","display_name":"compliance checking","score":0.8560000061988831},{"id":"https://openalex.org/keywords/data-protection","display_name":"data protection","score":0.49300000071525574},{"id":"https://openalex.org/keywords/personal-information","display_name":"personal data","score":0.6970000267028809},{"id":"https://openalex.org/keywords/data-controllers","display_name":"data controllers","score":0.6959999799728394},{"id":"https://openalex.org/keywords/data-processors","display_name":"data processors","score":0.9980000257492065},{"id":"https://openalex.org/keywords/model-driven-engineering","display_name":"model-driven engineering","score":0.9380000233650208},{"id":"https://openalex.org/keywords/conceptual-model","display_name":"conceptual model","score":0.6919999718666077},{"id":"https://openalex.org/keywords/automated-compliance-verification","display_name":"automated compliance verification","score":0.5440000295639038},{"id":"https://openalex.org/keywords/data-privacy-law","display_name":"data privacy law","score":0.4519999921321869}],"concepts":[{"id":"https://openalex.org/C3090818","wikidata":"https://www.wikidata.org/wiki/Q1172506","display_name":"General Data Protection Regulation","level":3,"score":0.8369811773300171},{"id":"https://openalex.org/C90734943","wikidata":"https://www.wikidata.org/wiki/Q17008777","display_name":"Conceptualization","level":2,"score":0.7768253684043884},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7069516777992249},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.551786482334137},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.515067994594574},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.47139623761177063},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.4238334000110626},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.41328614950180054},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3715997338294983},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3010900616645813},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.13044750690460205},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/rew53955.2021.00009","doi":"https://doi.org/10.1109/rew53955.2021.00009","is_oa":false,"landing_page_url":"https://doi.org/10.1109/rew53955.2021.00009","pdf_url":null,"source":{"id":"https://openalex.org/S7407087432","display_name":"IEEE International Requirements Engineering Conference Workshops (REW)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE 29th International Requirements Engineering Conference Workshops (REW)","raw_type":"proceedings-article"},{"id":"pmh:oai:orbilu.uni.lu:10993/48398","doi":null,"is_oa":true,"landing_page_url":"https://orbilu.uni.lu/handle/10993/48398","pdf_url":"https://orbilu.uni.lu/bitstream/10993/48398/1/MoDRE21-AASB.pdf","source":{"id":"https://openalex.org/S4306401815","display_name":"Open Repository and Bibliography (University of Luxembourg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I186903577","host_organization_name":"University of Luxembourg","host_organization_lineage":["https://openalex.org/I186903577"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the 2021 IEEE 29th International Requirements Engineering Conference Workshops (REW) (2021-09); 11th Model-Driven Requirements Engineering (MoDRE) Workshop, 20-09-2021","raw_type":"http://purl.org/coar/resource_type/c_5794"}],"best_oa_location":{"id":"pmh:oai:orbilu.uni.lu:10993/48398","doi":null,"is_oa":true,"landing_page_url":"https://orbilu.uni.lu/handle/10993/48398","pdf_url":"https://orbilu.uni.lu/bitstream/10993/48398/1/MoDRE21-AASB.pdf","source":{"id":"https://openalex.org/S4306401815","display_name":"Open Repository and Bibliography (University of Luxembourg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I186903577","host_organization_name":"University of Luxembourg","host_organization_lineage":["https://openalex.org/I186903577"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the 2021 IEEE 29th International Requirements Engineering Conference Workshops (REW) (2021-09); 11th Model-Driven Requirements Engineering (MoDRE) Workshop, 20-09-2021","raw_type":"http://purl.org/coar/resource_type/c_5794"},"sustainable_development_goals":[{"display_name":"Peace, justice, and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.4399999976158142}],"sustainable_development_goals_aurora":[{"display_name":"Decent work and economic growth","id":"https://metadata.un.org/sdg/8","score":0.5400000214576721}],"study_designs":[],"awards":[{"id":"https://openalex.org/G5866439725","display_name":null,"funder_award_id":"BRIDGES/19/IS/13759068/ARTAGO","funder_id":"https://openalex.org/F4320321038","funder_display_name":"Fonds National de la Recherche Luxembourg"}],"funders":[{"id":"https://openalex.org/F4320321038","display_name":"Fonds National de la Recherche Luxembourg","ror":"https://ror.org/039z13y21"},{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3207630504.pdf","grobid_xml":"https://content.openalex.org/works/W3207630504.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W2015948069","https://openalex.org/W2404476296","https://openalex.org/W2460676686","https://openalex.org/W2711800646","https://openalex.org/W2795807997","https://openalex.org/W2803026876","https://openalex.org/W2896054571","https://openalex.org/W2901934818","https://openalex.org/W2911842117","https://openalex.org/W3024271340","https://openalex.org/W3037167671","https://openalex.org/W3043824836","https://openalex.org/W3092011919","https://openalex.org/W3099792031","https://openalex.org/W3210030168","https://openalex.org/W4301000707"],"related_works":["https://openalex.org/W4382318094","https://openalex.org/W4387143054","https://openalex.org/W4399687308","https://openalex.org/W7008107498","https://openalex.org/W2974571163","https://openalex.org/W3001100125","https://openalex.org/W2963094141","https://openalex.org/W3043824836","https://openalex.org/W3212063679","https://openalex.org/W3183843234"],"abstract_inverted_index":{"The":[0,42],"General":[1],"Data":[2],"Protection":[3],"Regulation":[4],"(GDPR)":[5],"has":[6,80],"been":[7],"recently":[8],"introduced":[9],"to":[10,27,52,66,81,129,171],"harmonize":[11],"the":[12,21,30,87,90,97,105,140,151,158],"different":[13],"data":[14,38,47,54,65,72,76],"privacy":[15],"laws":[16],"across":[17],"Europe.":[18],"Whether":[19],"inside":[20],"EU":[22,40],"or":[23],"outside,":[24],"organizations":[25,43,110],"have":[26],"comply":[28],"with":[29,44,104],"GDPR":[31,106,159],"as":[32,34,53,71],"long":[33],"they":[35],"handle":[36],"personal":[37,46,64,101],"of":[39,99,147,153],"residents.":[41],"whom":[45],"is":[48,107,113],"shared":[49],"are":[50],"referred":[51],"controllers.":[55],"When":[56],"controllers":[57,91],"subcontract":[58],"certain":[59],"services":[60],"that":[61,135],"involve":[62],"processing":[63,77],"service":[67],"providers":[68],"(also":[69],"known":[70],"processors),":[73],"then":[74],"a":[75,131,145,154],"agreement":[78,85],"(DPA)":[79],"be":[82,169],"issued.":[83],"This":[84],"regulates":[86],"relationship":[88],"between":[89],"and":[92,94,115,160],"processors":[93],"also":[95],"ensures":[96],"protection":[98],"individuals\u2019":[100],"data.":[102],"Compliance":[103],"challenging":[108],"for":[109,149],"since":[111],"it":[112],"large":[114],"relies":[116],"on":[117,126],"complex":[118],"legal":[119],"concepts.":[120],"In":[121],"this":[122,166],"paper,":[123],"we":[124,143],"draw":[125],"model-driven":[127],"engineering":[128],"build":[130],"machine-analyzable":[132],"conceptual":[133],"model":[134],"characterizes":[136],"DPA-related":[137],"requirements":[138],"in":[139,165],"GDPR.":[141],"Further,":[142],"create":[144],"set":[146],"criteria":[148],"checking":[150,176],"compliance":[152,175],"given":[155],"DPA":[156],"against":[157],"discuss":[161],"how":[162],"our":[163],"work":[164],"paper":[167],"can":[168],"adapted":[170],"develop":[172],"an":[173],"automated":[174],"solution.":[177]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":11},{"year":2023,"cited_by_count":2}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2021-10-25T00:00:00"}