{"id":"https://openalex.org/W4382393500","doi":"https://doi.org/10.1109/tse.2023.3290237","title":"Privacy Engineering in the Wild: Understanding the Practitioners\u2019 Mindset, Organizational Aspects, and Current Practices","display_name":"Privacy Engineering in the Wild: Understanding the Practitioners\u2019 Mindset, Organizational Aspects, and Current Practices","publication_year":2023,"publication_date":"2023-06-28","ids":{"openalex":"https://openalex.org/W4382393500","doi":"https://doi.org/10.1109/tse.2023.3290237"},"language":"en","primary_location":{"id":"doi:10.1109/tse.2023.3290237","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tse.2023.3290237","pdf_url":"https://ieeexplore.ieee.org/ielx7/32/4359463/10167784.pdf","source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ieeexplore.ieee.org/ielx7/32/4359463/10167784.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007635122","display_name":"Leonardo Horn Iwaya","orcid":"https://orcid.org/0000-0001-9005-0543"},"institutions":[{"id":"https://openalex.org/I43968019","display_name":"Karlstad University","ror":"https://ror.org/05s754026","country_code":"SE","type":"education","lineage":["https://openalex.org/I43968019"]},{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU","SE"],"is_corresponding":false,"raw_author_name":"Leonardo Horn Iwaya","raw_affiliation_strings":["Centre for Research on Engineering Software Technologies, The University of Adelaide, Adelaide, SA, Australia","Centre for Research on Engineering Software Technologies, the University of Adelaide, Adelaide, SA, Australia","Cyber Security Cooperative Research Centre (CSCRC), Australia","Privacy and Security (PriSec) research group, Department of Mathematics and Computer Science, Karlstad University, Sweden"],"raw_orcid":"https://orcid.org/0000-0001-9005-0543","affiliations":[{"raw_affiliation_string":"Centre for Research on Engineering Software Technologies, The University of Adelaide, Adelaide, SA, Australia","institution_ids":["https://openalex.org/I5681781"]},{"raw_affiliation_string":"Centre for Research on Engineering Software Technologies, the University of Adelaide, Adelaide, SA, Australia","institution_ids":["https://openalex.org/I5681781"]},{"raw_affiliation_string":"Cyber Security Cooperative Research Centre (CSCRC), Australia","institution_ids":[]},{"raw_affiliation_string":"Privacy and Security (PriSec) research group, Department of Mathematics and Computer Science, Karlstad University, Sweden","institution_ids":["https://openalex.org/I43968019"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103075476","display_name":"Muhammad Ali Babar","orcid":"https://orcid.org/0000-0001-9696-3626"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Muhammad Ali Babar","raw_affiliation_strings":["Centre for Research on Engineering Software Technologies, The University of Adelaide, Adelaide, SA, Australia","Centre for Research on Engineering Software Technologies, the University of Adelaide, Adelaide, SA, Australia","Cyber Security Cooperative Research Centre (CSCRC), Australia"],"raw_orcid":"https://orcid.org/0000-0001-9696-3626","affiliations":[{"raw_affiliation_string":"Centre for Research on Engineering Software Technologies, The University of Adelaide, Adelaide, SA, Australia","institution_ids":["https://openalex.org/I5681781"]},{"raw_affiliation_string":"Centre for Research on Engineering Software Technologies, the University of Adelaide, Adelaide, SA, Australia","institution_ids":["https://openalex.org/I5681781"]},{"raw_affiliation_string":"Cyber Security Cooperative Research Centre (CSCRC), Australia","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034962802","display_name":"Awais Rashid","orcid":"https://orcid.org/0000-0002-0109-1341"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]},{"id":"https://openalex.org/I4210119147","display_name":"NIHR Bristol Biomedical Research Centre","ror":"https://ror.org/02mtt1z51","country_code":"GB","type":"government","lineage":["https://openalex.org/I34931013","https://openalex.org/I36234482","https://openalex.org/I4210119147"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Awais Rashid","raw_affiliation_strings":["Department of Computer Science, Bristol Cyber Security Group, REPHRAIN: National Research Centre on Privacy, Harm Reduction and Adversarial Influence Online, University of Bristol, Bristol, U.K","Bristol Cyber Security Group, Department of Computer Science, University of Bristol, U.K"],"raw_orcid":"https://orcid.org/0000-0002-0109-1341","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Bristol Cyber Security Group, REPHRAIN: National Research Centre on Privacy, Harm Reduction and Adversarial Influence Online, University of Bristol, Bristol, U.K","institution_ids":["https://openalex.org/I4210119147"]},{"raw_affiliation_string":"Bristol Cyber Security Group, Department of Computer Science, University of Bristol, U.K","institution_ids":["https://openalex.org/I36234482"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":{"value":2051,"currency":"EUR","value_usd":2212},"fwci":17.4285,"has_fulltext":true,"cited_by_count":37,"citation_normalized_percentile":{"value":0.99266568,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"49","issue":"9","first_page":"4324","last_page":"4348"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9807000160217285,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9624999761581421,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/mindset","display_name":"Mindset","score":0.8285731077194214},{"id":"https://openalex.org/keywords/privacy-by-design","display_name":"Privacy by Design","score":0.6464591026306152},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.5752492547035217},{"id":"https://openalex.org/keywords/thematic-analysis","display_name":"Thematic analysis","score":0.5474657416343689},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4931761622428894},{"id":"https://openalex.org/keywords/privacy-software","display_name":"Privacy software","score":0.48019707202911377},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.47503331303596497},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3425664007663727},{"id":"https://openalex.org/keywords/qualitative-research","display_name":"Qualitative research","score":0.23887985944747925},{"id":"https://openalex.org/keywords/sociology","display_name":"Sociology","score":0.1514410674571991}],"concepts":[{"id":"https://openalex.org/C2778491294","wikidata":"https://www.wikidata.org/wiki/Q1339824","display_name":"Mindset","level":2,"score":0.8285731077194214},{"id":"https://openalex.org/C193934123","wikidata":"https://www.wikidata.org/wiki/Q7246028","display_name":"Privacy by Design","level":3,"score":0.6464591026306152},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.5752492547035217},{"id":"https://openalex.org/C74196892","wikidata":"https://www.wikidata.org/wiki/Q7781188","display_name":"Thematic analysis","level":3,"score":0.5474657416343689},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4931761622428894},{"id":"https://openalex.org/C509729295","wikidata":"https://www.wikidata.org/wiki/Q7246032","display_name":"Privacy software","level":3,"score":0.48019707202911377},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.47503331303596497},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3425664007663727},{"id":"https://openalex.org/C190248442","wikidata":"https://www.wikidata.org/wiki/Q839486","display_name":"Qualitative research","level":2,"score":0.23887985944747925},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.1514410674571991},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tse.2023.3290237","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tse.2023.3290237","pdf_url":"https://ieeexplore.ieee.org/ielx7/32/4359463/10167784.pdf","source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},{"id":"pmh:oai:DiVA.org:kau-96159","is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:kau:diva-96159","pdf_url":null,"source":{"id":"https://openalex.org/S4306401559","display_name":"KTH Publication Database DiVA (KTH Royal Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:research-information.bris.ac.uk:publications/992375c1-0c14-4529-b66b-b707bb0a5af5","is_oa":true,"landing_page_url":"https://hdl.handle.net/1983/992375c1-0c14-4529-b66b-b707bb0a5af5","pdf_url":null,"source":{"id":"https://openalex.org/S4306400895","display_name":"Bristol Research (University of Bristol)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I36234482","host_organization_name":"University of Bristol","host_organization_lineage":["https://openalex.org/I36234482"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":""}],"best_oa_location":{"id":"doi:10.1109/tse.2023.3290237","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tse.2023.3290237","pdf_url":"https://ieeexplore.ieee.org/ielx7/32/4359463/10167784.pdf","source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Climate action","score":0.7099999785423279,"id":"https://metadata.un.org/sdg/13"}],"awards":[{"id":"https://openalex.org/G1461212393","display_name":null,"funder_award_id":"EP/V011189/1","funder_id":"https://openalex.org/F4320310077","funder_display_name":"National Research Centre"},{"id":"https://openalex.org/G2948339694","display_name":"REPHRAIN: Research centre on Privacy, Harm Reduction and Adversarial Influence online","funder_award_id":"EP/V011189/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G303350058","display_name":null,"funder_award_id":"EP/P011799/2","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G4405813538","display_name":null,"funder_award_id":"RUN/220266","funder_id":"https://openalex.org/F4320328363","funder_display_name":"Region V\u00e4rmland"},{"id":"https://openalex.org/G4937468798","display_name":null,"funder_award_id":"H2020","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G5045220161","display_name":null,"funder_award_id":"H2020","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G5323896247","display_name":null,"funder_award_id":"EP/W025361/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G5356549776","display_name":"Cyber Security Network of Competence Centres for Europe","funder_award_id":"830929","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G6301215042","display_name":"Time-frequency analysis of paraproducts","funder_award_id":"220266","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G6384328479","display_name":null,"funder_award_id":"830929","funder_id":"https://openalex.org/F4320332999","funder_display_name":"Horizon 2020 Framework Programme"}],"funders":[{"id":"https://openalex.org/F4320310077","display_name":"National Research Centre","ror":"https://ror.org/02n85j827"},{"id":"https://openalex.org/F4320315885","display_name":"Australian Government","ror":"https://ror.org/0314h5y94"},{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320328363","display_name":"Region V\u00e4rmland","ror":"https://ror.org/02q3m6z23"},{"id":"https://openalex.org/F4320332999","display_name":"Horizon 2020 Framework Programme","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4382393500.pdf","grobid_xml":"https://content.openalex.org/works/W4382393500.grobid-xml"},"referenced_works_count":88,"referenced_works":["https://openalex.org/W1548561497","https://openalex.org/W1604658196","https://openalex.org/W1912305484","https://openalex.org/W2000645163","https://openalex.org/W2005296448","https://openalex.org/W2025409117","https://openalex.org/W2026736862","https://openalex.org/W2027320617","https://openalex.org/W2029699977","https://openalex.org/W2035437115","https://openalex.org/W2062489713","https://openalex.org/W2063299125","https://openalex.org/W2081046118","https://openalex.org/W2082765746","https://openalex.org/W2088489410","https://openalex.org/W2089358714","https://openalex.org/W2116560806","https://openalex.org/W2133535394","https://openalex.org/W2155404021","https://openalex.org/W2162739315","https://openalex.org/W2188935272","https://openalex.org/W2323810641","https://openalex.org/W2479405203","https://openalex.org/W2499372795","https://openalex.org/W2524624957","https://openalex.org/W2557607105","https://openalex.org/W2588852483","https://openalex.org/W2608457654","https://openalex.org/W2741197453","https://openalex.org/W2757252645","https://openalex.org/W2786967845","https://openalex.org/W2792626313","https://openalex.org/W2805916231","https://openalex.org/W2807591814","https://openalex.org/W2887540132","https://openalex.org/W2888134164","https://openalex.org/W2892368422","https://openalex.org/W2901879550","https://openalex.org/W2908104737","https://openalex.org/W2911809944","https://openalex.org/W2913566602","https://openalex.org/W2914882710","https://openalex.org/W2963278782","https://openalex.org/W2967432172","https://openalex.org/W2969683549","https://openalex.org/W2969803706","https://openalex.org/W2970805385","https://openalex.org/W2975856975","https://openalex.org/W2986667521","https://openalex.org/W2996823376","https://openalex.org/W3008003796","https://openalex.org/W3011230092","https://openalex.org/W3015529431","https://openalex.org/W3017863658","https://openalex.org/W3020524080","https://openalex.org/W3035145648","https://openalex.org/W3097831471","https://openalex.org/W3120130861","https://openalex.org/W3122674220","https://openalex.org/W3135677518","https://openalex.org/W3157871454","https://openalex.org/W3160031811","https://openalex.org/W3161073803","https://openalex.org/W3199835088","https://openalex.org/W3202071870","https://openalex.org/W3207768375","https://openalex.org/W3209600461","https://openalex.org/W4205373767","https://openalex.org/W4210963524","https://openalex.org/W4213152771","https://openalex.org/W4220957579","https://openalex.org/W4225100575","https://openalex.org/W4230556537","https://openalex.org/W4238165357","https://openalex.org/W4254194321","https://openalex.org/W4285133156","https://openalex.org/W4285240656","https://openalex.org/W4293783515","https://openalex.org/W4300963145","https://openalex.org/W4317859635","https://openalex.org/W4383865221","https://openalex.org/W6628754589","https://openalex.org/W6730185109","https://openalex.org/W6748666700","https://openalex.org/W6755962607","https://openalex.org/W6767031406","https://openalex.org/W6777303992","https://openalex.org/W6785256629"],"related_works":["https://openalex.org/W2101582069","https://openalex.org/W2127814706","https://openalex.org/W2994243660","https://openalex.org/W2118333568","https://openalex.org/W2116878667","https://openalex.org/W2675231964","https://openalex.org/W2549995367","https://openalex.org/W3042284153","https://openalex.org/W2584827882","https://openalex.org/W1598195095"],"abstract_inverted_index":{"Privacy":[0],"engineering,":[1,224],"as":[2,185,201,247],"an":[3],"emerging":[4],"field":[5],"of":[6,62,74,102,123,192,222,230,280],"research":[7,52,80],"and":[8,14,21,25,34,48,87,91,96,108,115,138,142,170,178,187,189,203,242,251,282,291,302,314],"practice,":[9],"comprises":[10],"the":[11,58,72,83,134,164,208,211,220,262,277,289],"technical":[12],"capabilities":[13],"management":[15],"processes":[16],"needed":[17],"to":[18,41,56,71,132,226,256,273,288,295],"implement,":[19],"deploy,":[20],"operate":[22],"privacy":[23,76,95,124,161,168,175,182,193,197,223,231,249,264,270,278,310],"features":[24],"controls":[26,204],"in":[27,37,207],"working":[28],"systems.":[29],"For":[30],"that,":[31],"software":[32,38,59,84,306],"practitioners":[33,104,281,307],"other":[35],"stakeholders":[36],"companies":[39],"need":[40],"work":[42],"cooperatively":[43],"toward":[44],"building":[45],"privacy-preserving":[46],"businesses":[47],"engineering":[49,77,98,162,198,271,311],"solutions.":[50],"Significant":[51],"has":[53],"been":[54,319],"done":[55],"understand":[57],"practitioners'":[60,85,174,240,263],"perceptions":[61],"information":[63],"privacy,":[64],"but":[65],"more":[66],"emphasis":[67],"should":[68],"be":[69,274],"given":[70],"uptake":[73],"concrete":[75],"components.":[78],"This":[79],"delves":[81],"into":[82,173],"perspectives":[86],"mindset,":[88],"organisational":[89,181,248],"aspects,":[90,183],"current":[92],"practices":[93],"on":[94,119,239,261,308],"its":[97],"processes.":[99],"A":[100,266],"total":[101],"30":[103],"from":[105],"nine":[106],"countries":[107],"backgrounds":[109],"were":[110,253],"interviewed,":[111],"sharing":[112],"their":[113,117,283],"experiences":[114],"voicing":[116],"opinions":[118],"a":[120,140,147,227,258],"broad":[121],"range":[122],"topics.":[125],"The":[126],"thematic":[127,144,158],"analysis":[128],"methodology":[129],"was":[130],"adopted":[131],"code":[133],"interview":[135],"data":[136],"qualitatively":[137],"construct":[139],"rich":[141],"nuanced":[143],"framework.":[145],"As":[146],"result,":[148],"we":[149],"identified":[150],"three":[151],"critical":[152],"interconnected":[153],"themes":[154],"that":[155,316],"compose":[156],"our":[157],"framework":[159],"for":[160,269,305],"\u201cin":[163],"wild\u201d:":[165],"(1)":[166],"personal":[167],"mindset":[169],"stance,":[171],"categorised":[172],"knowledge,":[176],"attitudes":[177],"behaviours;":[179],"(2)":[180],"such":[184,200,246],"decision-power":[186],"positive":[188,228],"negative":[190],"examples":[191],"climate;":[194],"and,":[195],"(3)":[196],"practices,":[199],"procedures":[202],"concretely":[205],"used":[206],"industry.":[209],"Among":[210],"main":[212],"findings,":[213],"this":[214],"study":[215],"provides":[216],"many":[217],"insights":[218],"about":[219],"state-of-the-practice":[221],"pointing":[225],"influence":[229,260],"laws":[232],"(e.g.,":[233],"EU":[234],"General":[235],"Data":[236],"Protection":[237],"Regulation)":[238],"behaviours":[241],"organisations'":[243],"cultures.":[244],"Aspects":[245],"culture":[250],"climate":[252],"also":[254,299],"confirmed":[255],"have":[257,317],"powerful":[259],"behaviours.":[265],"conducive":[267],"environment":[268],"needs":[272],"created,":[275],"aligning":[276],"values":[279],"organisations,":[284],"with":[285],"particular":[286],"attention":[287],"leaders":[290],"top":[292],"management's":[293],"commitment":[294],"privacy.":[296],"Organisations":[297],"can":[298],"facilitate":[300],"education":[301],"awareness":[303],"training":[304],"existing":[309],"theories,":[312],"methods":[313],"tools":[315],"already":[318],"proven":[320],"effective.":[321]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":19},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-27T08:26:11.824852","created_date":"2023-06-29T00:00:00"}