{"id":"https://openalex.org/W2888134164","doi":"https://doi.org/10.1145/3267357.3267368","title":"Are We There Yet?","display_name":"Are We There Yet?","publication_year":2018,"publication_date":"2018-01-15","ids":{"openalex":"https://openalex.org/W2888134164","doi":"https://doi.org/10.1145/3267357.3267368","mag":"2888134164"},"language":"en","primary_location":{"id":"doi:10.1145/3267357.3267368","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3267357.3267368","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2nd International Workshop on Multimedia Privacy and Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084257709","display_name":"Sean Sirur","orcid":null},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Sean Sirur","raw_affiliation_strings":["University of Oxford, Oxford, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Oxford, Oxford, United Kingdom","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075453550","display_name":"Jason R. C. Nurse","orcid":"https://orcid.org/0000-0003-4118-1680"},"institutions":[{"id":"https://openalex.org/I20581793","display_name":"University of Kent","ror":"https://ror.org/00xkeyj56","country_code":"GB","type":"education","lineage":["https://openalex.org/I20581793"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Jason R.C. Nurse","raw_affiliation_strings":["University of Kent, Canterbury, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Kent, Canterbury, United Kingdom","institution_ids":["https://openalex.org/I20581793"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054729803","display_name":"Helena Webb","orcid":"https://orcid.org/0000-0002-4303-7773"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Helena Webb","raw_affiliation_strings":["University of Oxford, Oxford, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Oxford, Oxford, United Kingdom","institution_ids":["https://openalex.org/I40120149"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":14.8134,"has_fulltext":false,"cited_by_count":104,"citation_normalized_percentile":{"value":0.98737699,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"88","last_page":"95"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9807999730110168,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13364","display_name":"Digitalization, Law, and Regulation","score":0.978600025177002,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/general-data-protection-regulation","display_name":"General Data Protection Regulation","score":0.8439130783081055},{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.7394479513168335},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.7346599102020264},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.6278964281082153},{"id":"https://openalex.org/keywords/data-protection-act-1998","display_name":"Data Protection Act 1998","score":0.5472819209098816},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.5251032114028931},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.5150718092918396},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.47570616006851196},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.4272989332675934},{"id":"https://openalex.org/keywords/public-relations","display_name":"Public relations","score":0.4067643880844116},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.40088632702827454},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.29745322465896606},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.26018786430358887},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.21973830461502075},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.08331406116485596}],"concepts":[{"id":"https://openalex.org/C3090818","wikidata":"https://www.wikidata.org/wiki/Q1172506","display_name":"General Data Protection Regulation","level":3,"score":0.8439130783081055},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.7394479513168335},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.7346599102020264},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.6278964281082153},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.5472819209098816},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5251032114028931},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.5150718092918396},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.47570616006851196},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.4272989332675934},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.4067643880844116},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.40088632702827454},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.29745322465896606},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.26018786430358887},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.21973830461502075},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.08331406116485596},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3267357.3267368","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3267357.3267368","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2nd International Workshop on Multimedia Privacy and Security","raw_type":"proceedings-article"},{"id":"pmh:oai:kar.kent.ac.uk:68765","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3267357.3267368>)","pdf_url":null,"source":{"id":"https://openalex.org/S4377196264","display_name":"Kent Academic Repository (University of Kent)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I20581793","host_organization_name":"University of Kent","host_organization_lineage":["https://openalex.org/I20581793"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Conference proceeding"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5400000214576721,"display_name":"Decent work and economic growth","id":"https://metadata.un.org/sdg/8"}],"awards":[{"id":"https://openalex.org/G8467514335","display_name":"Cyber Security CDT Phase Two (University of Oxford)","funder_award_id":"EP/P00881X/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1589275176","https://openalex.org/W1989082443","https://openalex.org/W2044813325","https://openalex.org/W2156983464","https://openalex.org/W2219545020","https://openalex.org/W2460676686","https://openalex.org/W2548080134","https://openalex.org/W2621635773","https://openalex.org/W2622330081","https://openalex.org/W2734999728","https://openalex.org/W2756014520","https://openalex.org/W2766842895","https://openalex.org/W2767402553","https://openalex.org/W2777759101","https://openalex.org/W2789637178","https://openalex.org/W4234733488"],"related_works":["https://openalex.org/W2917102635","https://openalex.org/W3023256691","https://openalex.org/W2789497412","https://openalex.org/W2883729192","https://openalex.org/W2910484607","https://openalex.org/W2794700933","https://openalex.org/W2901967497","https://openalex.org/W3048759155","https://openalex.org/W3000605968","https://openalex.org/W3171079982"],"abstract_inverted_index":{"The":[0,27,131,162],"EU":[1,25,58],"General":[2],"Data":[3],"Protection":[4],"Regulation":[5],"(GDPR),":[6],"enforced":[7],"from":[8],"25\\textsuperscriptth":[9],"May":[10],"2018,":[11],"aims":[12],"to":[13,69,126,151,181,192],"reform":[14],"how":[15,94,180],"organisations":[16,76,121,137],"view":[17],"and":[18,48,93,129,189],"control":[19],"the":[20,54,67,71,80,88,90,117,172,176,183,187,190,195],"personal":[21,39],"data":[22,40,148,200],"of":[23,29,38,175,186,197],"private":[24],"citizens.":[26],"scope":[28],"GDPR":[30,124],"is":[31,96],"somewhat":[32],"unprecedented:":[33],"it":[34],"regulates":[35],"every":[36],"aspect":[37],"handling,":[41],"includes":[42],"hefty":[43],"potential":[44],"penalties":[45],"for":[46,135],"non-compliance,":[47],"can":[49],"prosecute":[50],"any":[51],"company":[52],"in":[53,77,85,166],"world":[55],"that":[56,119,139],"processes":[57],"citizens'":[59],"data.":[60],"In":[61],"this":[62],"paper,":[63],"we":[64],"look":[65],"behind":[66],"scenes":[68],"investigate":[70],"real":[72],"challenges":[73],"faced":[74,165],"by":[75],"engaging":[78],"with":[79,87,111,144],"GDPR.":[81],"This":[82],"considers":[83],"issues":[84,164],"working":[86],"regulation,":[89],"implementation":[91],"process,":[92],"compliance":[95,125,168],"verified.":[97],"Our":[98],"research":[99],"approach":[100],"relies":[101],"on":[102,108,147],"literature":[103],"but,":[104],"more":[105],"importantly,":[106],"draws":[107],"detailed":[109],"interviews":[110],"several":[112],"organisations.":[113],"Key":[114],"findings":[115],"include":[116],"fact":[118],"large":[120],"generally":[122],"found":[123,134],"be":[127],"reasonable":[128],"doable.":[130],"same":[132],"was":[133,156],"small-to-medium":[136],"(SMEs/SMBs)":[138],"were":[140],"highly":[141],"security-oriented.":[142],"SMEs":[143],"less":[145],"focus":[146],"protection":[149],"struggled":[150],"make":[152],"what":[153],"they":[154],"felt":[155],"a":[157],"satisfactory":[158],"attempt":[159],"at":[160],"compliance.":[161],"main":[163],"their":[167,198],"attempts":[169],"emerged":[170],"from:":[171],"sheer":[173],"breadth":[174],"regulation;":[177,188],"questions":[178],"around":[179],"enact":[182],"qualitative":[184],"recommendations":[185],"need":[191],"map":[193],"out":[194],"entirety":[196],"complex":[199],"networks.":[201]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":20},{"year":2024,"cited_by_count":23},{"year":2023,"cited_by_count":16},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":12},{"year":2019,"cited_by_count":7}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2018-08-31T00:00:00"}