{"id":"https://openalex.org/W4399110636","doi":"https://doi.org/10.1109/access.2024.3406724","title":"Challenges and Enablers for GDPR Compliance: Systematic Literature Review and Future Research Directions","display_name":"Challenges and Enablers for GDPR Compliance: Systematic Literature Review and Future Research Directions","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4399110636","doi":"https://doi.org/10.1109/access.2024.3406724"},"language":"en","primary_location":{"id":"doi:10.1109/access.2024.3406724","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3406724","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10540423.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10540423.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024913717","display_name":"Nemer Alberto Zaguir","orcid":"https://orcid.org/0000-0003-3244-4012"},"institutions":[{"id":"https://openalex.org/I17974374","display_name":"Universidade de S\u00e3o Paulo","ror":"https://ror.org/036rp1748","country_code":"BR","type":"education","lineage":["https://openalex.org/I17974374"]}],"countries":["BR"],"is_corresponding":true,"raw_author_name":"Nemer Alberto Zaguir","raw_affiliation_strings":["Department of Production Engineering, University of São Paulo, São Paulo, Brazil","Department of Production Engineering, University of Sao Paulo, Av. Prof. Luciano Gualberto, Sao Paulo, Brazil"],"raw_orcid":"https://orcid.org/0000-0003-3244-4012","affiliations":[{"raw_affiliation_string":"Department of Production Engineering, University of São Paulo, São Paulo, Brazil","institution_ids":[]},{"raw_affiliation_string":"Department of Production Engineering, University of Sao Paulo, Av. Prof. Luciano Gualberto, Sao Paulo, Brazil","institution_ids":["https://openalex.org/I17974374"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101619935","display_name":"Guilherme Henrique de Magalh\u00e3es","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guilherme Henrique de Magalh\u00e3es","raw_affiliation_strings":["Department of Production Engineering, University of São Paulo, São Paulo, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-7867-2523","affiliations":[{"raw_affiliation_string":"Department of Production Engineering, University of São Paulo, São Paulo, Brazil","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018953877","display_name":"Mauro de Mesquita Sp\u00ednola","orcid":"https://orcid.org/0000-0002-5147-9395"},"institutions":[{"id":"https://openalex.org/I17974374","display_name":"Universidade de S\u00e3o Paulo","ror":"https://ror.org/036rp1748","country_code":"BR","type":"education","lineage":["https://openalex.org/I17974374"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Mauro de Mesquita Spinola","raw_affiliation_strings":["Department of Production Engineering, University of São Paulo, São Paulo, Brazil","Department of Production Engineering, University of Sao Paulo, Av. Prof. Luciano Gualberto, Sao Paulo, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-5147-9395","affiliations":[{"raw_affiliation_string":"Department of Production Engineering, University of São Paulo, São Paulo, Brazil","institution_ids":[]},{"raw_affiliation_string":"Department of Production Engineering, University of Sao Paulo, Av. Prof. Luciano Gualberto, Sao Paulo, Brazil","institution_ids":["https://openalex.org/I17974374"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5024913717"],"corresponding_institution_ids":["https://openalex.org/I17974374"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":25.3998,"has_fulltext":false,"cited_by_count":24,"citation_normalized_percentile":{"value":0.99591758,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"12","issue":null,"first_page":"81608","last_page":"81630"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9853000044822693,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.644927978515625},{"id":"https://openalex.org/keywords/systematic-review","display_name":"Systematic review","score":0.5922237634658813},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.5542223453521729},{"id":"https://openalex.org/keywords/corporate-governance","display_name":"Corporate governance","score":0.5249688029289246},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.46912097930908203},{"id":"https://openalex.org/keywords/isolation","display_name":"Isolation (microbiology)","score":0.45105424523353577},{"id":"https://openalex.org/keywords/conceptual-framework","display_name":"Conceptual framework","score":0.449733167886734},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.41576844453811646},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3788512945175171},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.2146034836769104},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.13707733154296875},{"id":"https://openalex.org/keywords/sociology","display_name":"Sociology","score":0.11975833773612976},{"id":"https://openalex.org/keywords/medline","display_name":"MEDLINE","score":0.0918089747428894}],"concepts":[{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.644927978515625},{"id":"https://openalex.org/C189708586","wikidata":"https://www.wikidata.org/wiki/Q1504425","display_name":"Systematic review","level":3,"score":0.5922237634658813},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.5542223453521729},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.5249688029289246},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.46912097930908203},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.45105424523353577},{"id":"https://openalex.org/C14224292","wikidata":"https://www.wikidata.org/wiki/Q13600188","display_name":"Conceptual framework","level":2,"score":0.449733167886734},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.41576844453811646},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3788512945175171},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.2146034836769104},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.13707733154296875},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.11975833773612976},{"id":"https://openalex.org/C2779473830","wikidata":"https://www.wikidata.org/wiki/Q1540899","display_name":"MEDLINE","level":2,"score":0.0918089747428894},{"id":"https://openalex.org/C89423630","wikidata":"https://www.wikidata.org/wiki/Q7193","display_name":"Microbiology","level":1,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2024.3406724","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3406724","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10540423.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:003250016","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ACCESS.2024.3406724","pdf_url":null,"source":{"id":"https://openalex.org/S4306402641","display_name":"LA Referencia (Red Federada de Repositorios Institucionales de Publicaciones Cient\u00edficas)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4383465926","host_organization_name":"LA Referencia","host_organization_lineage":["https://openalex.org/I4383465926"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"instacron:USP","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:e2ef2f4522db4007a3103e5413f8bcf2","is_oa":true,"landing_page_url":"https://doaj.org/article/e2ef2f4522db4007a3103e5413f8bcf2","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 12, Pp 81608-81630 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2024.3406724","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3406724","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10540423.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4399110636.pdf"},"referenced_works_count":121,"referenced_works":["https://openalex.org/W1975675278","https://openalex.org/W2062578884","https://openalex.org/W2079666165","https://openalex.org/W2111628838","https://openalex.org/W2124975206","https://openalex.org/W2221091850","https://openalex.org/W2406495567","https://openalex.org/W2566134098","https://openalex.org/W2613711491","https://openalex.org/W2616332126","https://openalex.org/W2621635773","https://openalex.org/W2659515307","https://openalex.org/W2744999500","https://openalex.org/W2753603513","https://openalex.org/W2768481906","https://openalex.org/W2772927365","https://openalex.org/W2784231342","https://openalex.org/W2789346393","https://openalex.org/W2796141164","https://openalex.org/W2796187277","https://openalex.org/W2798006652","https://openalex.org/W2804246769","https://openalex.org/W2809608439","https://openalex.org/W2810094949","https://openalex.org/W2811352385","https://openalex.org/W2889573629","https://openalex.org/W2896738829","https://openalex.org/W2897943480","https://openalex.org/W2899634604","https://openalex.org/W2900709991","https://openalex.org/W2901284087","https://openalex.org/W2901967497","https://openalex.org/W2904119980","https://openalex.org/W2910338073","https://openalex.org/W2911202569","https://openalex.org/W2911357324","https://openalex.org/W2911560572","https://openalex.org/W2911843413","https://openalex.org/W2912364678","https://openalex.org/W2922295561","https://openalex.org/W2948927454","https://openalex.org/W2951385923","https://openalex.org/W2951635356","https://openalex.org/W2963478978","https://openalex.org/W2967606168","https://openalex.org/W2973086080","https://openalex.org/W2974232067","https://openalex.org/W2974571163","https://openalex.org/W2976219907","https://openalex.org/W2976552340","https://openalex.org/W2980024731","https://openalex.org/W2980381981","https://openalex.org/W2980776809","https://openalex.org/W2985807578","https://openalex.org/W2987069389","https://openalex.org/W2993643592","https://openalex.org/W2996378057","https://openalex.org/W2998035592","https://openalex.org/W2998693128","https://openalex.org/W3001128173","https://openalex.org/W3004434640","https://openalex.org/W3012133979","https://openalex.org/W3013997816","https://openalex.org/W3017384853","https://openalex.org/W3027037005","https://openalex.org/W3029468131","https://openalex.org/W3030209542","https://openalex.org/W3034407770","https://openalex.org/W3034839622","https://openalex.org/W3035961578","https://openalex.org/W3036428020","https://openalex.org/W3037424174","https://openalex.org/W3046162587","https://openalex.org/W3049637327","https://openalex.org/W3081543622","https://openalex.org/W3085480867","https://openalex.org/W3119652009","https://openalex.org/W3124160647","https://openalex.org/W3124783112","https://openalex.org/W3125356411","https://openalex.org/W3135750780","https://openalex.org/W3138751516","https://openalex.org/W3149902173","https://openalex.org/W3159249221","https://openalex.org/W3162427212","https://openalex.org/W3195677808","https://openalex.org/W3197292575","https://openalex.org/W3197517831","https://openalex.org/W3197945000","https://openalex.org/W3198775584","https://openalex.org/W3198820632","https://openalex.org/W3206668369","https://openalex.org/W3211102095","https://openalex.org/W4220692215","https://openalex.org/W4230575913","https://openalex.org/W4241707055","https://openalex.org/W4280513656","https://openalex.org/W4281479780","https://openalex.org/W4281648052","https://openalex.org/W4283156052","https://openalex.org/W4283170057","https://openalex.org/W4293089033","https://openalex.org/W4300765175","https://openalex.org/W4308125177","https://openalex.org/W4308204852","https://openalex.org/W4308914439","https://openalex.org/W4310255388","https://openalex.org/W4319595403","https://openalex.org/W4320496305","https://openalex.org/W4323355607","https://openalex.org/W4327814723","https://openalex.org/W4361278571","https://openalex.org/W4362708458","https://openalex.org/W4368232770","https://openalex.org/W6606984457","https://openalex.org/W6676235441","https://openalex.org/W6750196121","https://openalex.org/W6755984630","https://openalex.org/W6793948706","https://openalex.org/W6800098501","https://openalex.org/W6800310948"],"related_works":["https://openalex.org/W2410395228","https://openalex.org/W3125941065","https://openalex.org/W2484615095","https://openalex.org/W4366449942","https://openalex.org/W4366371796","https://openalex.org/W4366371752","https://openalex.org/W4205440829","https://openalex.org/W1489027086","https://openalex.org/W2339265919","https://openalex.org/W1558088855"],"abstract_inverted_index":{"Compliance":[0],"with":[1],"the":[2,31,56,71,80,103,128,136,151,178,188],"General":[3],"Data":[4],"Protection":[5],"Regulation":[6],"(GDPR)":[7],"or":[8],"related":[9],"laws":[10],"by":[11],"organizations":[12],"could":[13,185],"require":[14],"organizational":[15],"and":[16,27,36,41,50,87,105,110,122,133,135,145,172,181,192],"technological":[17],"changes.":[18],"This":[19,93],"topic":[20],"has":[21],"gained":[22],"significant":[23],"attention":[24],"from":[25,177],"management":[26,90],"scholars":[28],"alike.":[29],"Although":[30],"literature":[32,100],"presents":[33],"some":[34,143],"reviews":[35],"research":[37,94,155,167],"articles":[38],"discussing":[39],"challenges":[40,104,121,144,180],"enablers":[42,75,106,146],"for":[43,66,76,107,126],"GDPR":[44,108],"compliance,":[45,77],"they":[46],"are":[47],"often":[48],"scattered":[49],"fragmented.":[51],"One":[52],"particular":[53],"challenge":[54],"is":[55],"implementation":[57],"roadmap":[58,129],"gap":[59,130],"that":[60,157],"arises":[61],"when":[62],"using":[63,131],"ISO-based":[64],"standards":[65],"compliance":[67,109],"in":[68],"isolation.":[69],"On":[70],"other":[72],"hand,":[73],"as":[74],"it":[78],"raises":[79],"potential":[81],"use":[82],"of":[83,102,120,138,190],"information":[84],"governance":[85],"(IG)":[86],"enterprise":[88],"architecture":[89],"(EAM)":[91],"disciplines.":[92],"aims":[95],"to":[96,161,168],"provide":[97],"a":[98,117,124,154],"systematic":[99],"review":[101],"address":[111],"this":[112,148],"gap.":[113,149],"The":[114],"findings":[115],"include":[116],"categorized":[118],"list":[119],"enablers,":[123],"strategy":[125],"bridging":[127],"IG":[132],"EAM,":[134],"development":[137],"five":[139],"propositions":[140],"based":[141],"on":[142],"around":[147],"Moreover,":[150],"study":[152],"proposes":[153],"agenda":[156],"includes":[158],"conceptual":[159],"work":[160],"build":[162],"an":[163],"IG-EAM":[164],"framework,":[165],"empirical":[166],"verify":[169],"those":[170],"propositions,":[171],"developing":[173],"new":[174],"hypotheses":[175],"stemming":[176],"review\u2019s":[179],"enablers.":[182],"These":[183],"contributions":[184],"enhance":[186],"both":[187],"body":[189],"knowledge":[191],"managerial":[193],"privacy":[194],"practices.":[195]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":19},{"year":2024,"cited_by_count":2}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2025-10-10T00:00:00"}