{"id":"https://openalex.org/W3183843234","doi":"https://doi.org/10.1145/3462757.3466081","title":"A combined rule-based and machine learning approach for automated GDPR compliance checking","display_name":"A combined rule-based and machine learning approach for automated GDPR compliance checking","publication_year":2021,"publication_date":"2021-06-21","ids":{"openalex":"https://openalex.org/W3183843234","doi":"https://doi.org/10.1145/3462757.3466081","mag":"3183843234"},"language":"en","primary_location":{"id":"doi:10.1145/3462757.3466081","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3462757.3466081","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Eighteenth International Conference on Artificial Intelligence and Law","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023874580","display_name":"Rajaa El Hamdani","orcid":"https://orcid.org/0000-0002-1555-4415"},"institutions":[{"id":"https://openalex.org/I83860666","display_name":"HEC Paris","ror":"https://ror.org/0423jsj19","country_code":"FR","type":"education","lineage":["https://openalex.org/I83860666"]}],"countries":["FR"],"is_corresponding":true,"raw_author_name":"Rajaa El Hamdani","raw_affiliation_strings":["HEC Paris, France"],"affiliations":[{"raw_affiliation_string":"HEC Paris, France","institution_ids":["https://openalex.org/I83860666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006726715","display_name":"Majd Mustapha","orcid":"https://orcid.org/0000-0002-8754-841X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Majd Mustapha","raw_affiliation_strings":["EURA NOVA, Belgium"],"affiliations":[{"raw_affiliation_string":"EURA NOVA, Belgium","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090299671","display_name":"David Restrepo Amariles","orcid":"https://orcid.org/0000-0002-2841-2563"},"institutions":[{"id":"https://openalex.org/I83860666","display_name":"HEC Paris","ror":"https://ror.org/0423jsj19","country_code":"FR","type":"education","lineage":["https://openalex.org/I83860666"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"David Restrepo Amariles","raw_affiliation_strings":["HEC Paris, France"],"affiliations":[{"raw_affiliation_string":"HEC Paris, France","institution_ids":["https://openalex.org/I83860666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072517753","display_name":"Aurore Troussel","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Aurore Troussel","raw_affiliation_strings":["Steptoe & Johnson LLP, Belgium"],"affiliations":[{"raw_affiliation_string":"Steptoe & Johnson LLP, Belgium","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090521344","display_name":"S\u00e9bastien Mee\u00f9s","orcid":null},"institutions":[{"id":"https://openalex.org/I83860666","display_name":"HEC Paris","ror":"https://ror.org/0423jsj19","country_code":"FR","type":"education","lineage":["https://openalex.org/I83860666"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"S\u00e9bastien Mee\u00f9s","raw_affiliation_strings":["HEC Paris, France"],"affiliations":[{"raw_affiliation_string":"HEC Paris, France","institution_ids":["https://openalex.org/I83860666"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052326684","display_name":"Katsiaryna Krasnashchok","orcid":"https://orcid.org/0000-0002-8152-2569"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Katsiaryna Krasnashchok","raw_affiliation_strings":["EURA NOVA, Belgium"],"affiliations":[{"raw_affiliation_string":"EURA NOVA, Belgium","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5023874580"],"corresponding_institution_ids":["https://openalex.org/I83860666"],"apc_list":null,"apc_paid":null,"fwci":12.5193,"has_fulltext":false,"cited_by_count":51,"citation_normalized_percentile":{"value":0.9853202,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"40","last_page":"49"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8045160174369812},{"id":"https://openalex.org/keywords/general-data-protection-regulation","display_name":"General Data Protection Regulation","score":0.6775221228599548},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.618520975112915},{"id":"https://openalex.org/keywords/bridge","display_name":"Bridge (graph theory)","score":0.6134719848632812},{"id":"https://openalex.org/keywords/supply-chain","display_name":"Supply chain","score":0.45393359661102295},{"id":"https://openalex.org/keywords/data-protection-act-1998","display_name":"Data Protection Act 1998","score":0.36970192193984985},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.35175979137420654},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2633778750896454}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8045160174369812},{"id":"https://openalex.org/C3090818","wikidata":"https://www.wikidata.org/wiki/Q1172506","display_name":"General Data Protection Regulation","level":3,"score":0.6775221228599548},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.618520975112915},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.6134719848632812},{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.45393359661102295},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.36970192193984985},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.35175979137420654},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2633778750896454},{"id":"https://openalex.org/C126322002","wikidata":"https://www.wikidata.org/wiki/Q11180","display_name":"Internal medicine","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3462757.3466081","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3462757.3466081","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Eighteenth International Conference on Artificial Intelligence and Law","raw_type":"proceedings-article"},{"id":"pmh:oai:dipot.ulb.ac.be:2013/356417","is_oa":false,"landing_page_url":"http://hdl.handle.net/2013/ULB-DIPOT:oai:dipot.ulb.ac.be:2013/356417","pdf_url":null,"source":{"id":"https://openalex.org/S4306401063","display_name":"D\u00e9p\u00f4t institutionnel de l'Universit\u00e9 libre de Bruxelles (Universit\u00e9 Libre de Bruxelles)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I132053463","host_organization_name":"Universit\u00e9 Libre de Bruxelles","host_organization_lineage":["https://openalex.org/I132053463"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"In: Proceedings of the Eighteenth International Conference on Artificial Intelligence and Law Proceedings of the Eighteenth International Conference on Artificial Intelligence and Law. Association for Computing Machinery","raw_type":"info:ulb-repo/semantics/openurl/proceeding"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Decent work and economic growth","score":0.5799999833106995,"id":"https://metadata.un.org/sdg/8"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W120919016","https://openalex.org/W323140412","https://openalex.org/W594140061","https://openalex.org/W1542755020","https://openalex.org/W1552644025","https://openalex.org/W1672671307","https://openalex.org/W2048089596","https://openalex.org/W2064675550","https://openalex.org/W2112796928","https://openalex.org/W2114315281","https://openalex.org/W2150766729","https://openalex.org/W2250879510","https://openalex.org/W2504108613","https://openalex.org/W2517394750","https://openalex.org/W2560661849","https://openalex.org/W2759177743","https://openalex.org/W2787106847","https://openalex.org/W2791737564","https://openalex.org/W2884046240","https://openalex.org/W2885362917","https://openalex.org/W2886646984","https://openalex.org/W2950577311","https://openalex.org/W2963070937","https://openalex.org/W2963094141","https://openalex.org/W2963580818","https://openalex.org/W2970597249","https://openalex.org/W2972787468","https://openalex.org/W2997878935","https://openalex.org/W2999830435","https://openalex.org/W3016801547","https://openalex.org/W3082274269","https://openalex.org/W3085592908","https://openalex.org/W3092011919","https://openalex.org/W3096674440","https://openalex.org/W3106869649","https://openalex.org/W3108655579","https://openalex.org/W3117609974","https://openalex.org/W3123673015","https://openalex.org/W6786476574"],"related_works":["https://openalex.org/W2917102635","https://openalex.org/W3122618225","https://openalex.org/W3121908490","https://openalex.org/W2788121460","https://openalex.org/W4249509933","https://openalex.org/W2808524301","https://openalex.org/W2900709991","https://openalex.org/W2913124998","https://openalex.org/W4386464793","https://openalex.org/W3165854592"],"abstract_inverted_index":{"The":[0,115,128],"General":[1],"Data":[2],"Protection":[3],"Regulation":[4],"(GDPR)":[5],"requires":[6],"data":[7,23,35,38,47,81,110,183],"controllers":[8],"to":[9,40,53,55,71,76,89,108,121,178,188],"implement":[10,72,153],"end-to-end":[11,190],"compliance.":[12,191],"Controllers":[13],"must":[14],"therefore":[15],"ensure":[16],"that":[17,131,172],"the":[18,22,34,80,102,123,132,140,182],"terms":[19],"agreed":[20],"with":[21,148],"subject":[24,39],"and":[25,43,138,145],"their":[26],"own":[27],"obligations":[28],"under":[29],"GDPR":[30,119],"are":[31],"respected":[32],"in":[33,79,181],"flows":[36],"from":[37,112],"controllers,":[41],"processors":[42,45],"sub":[44],"(i.e.":[46],"supply":[48,82,184],"chain).":[49],"This":[50],"paper":[51],"seeks":[52],"contribute":[54],"bridge":[56],"both":[57,143],"ends":[58],"of":[59,93,125,142,156,162],"compliance":[60,77,91],"checking":[61,78,92],"through":[62],"a":[63,69,73,98,160,186],"two-pronged":[64],"study.":[65],"First,":[66],"we":[67,85],"conceptualize":[68],"framework":[70],"document-centric":[74],"approach":[75,134,174],"chain.":[83],"Second,":[84],"develop":[86],"specific":[87],"methods":[88],"automate":[90],"privacy":[94,113,164],"policies.":[95,114],"We":[96,152,170],"test":[97],"two-modules":[99],"system,":[100],"where":[101],"first":[103],"module":[104,117],"relies":[105],"on":[106,159],"NLP":[107],"extract":[109],"practices":[111],"second":[116],"encodes":[118],"rules":[120],"check":[122],"presence":[124],"mandatory":[126],"information.":[127],"results":[129],"show":[130],"text-to-text":[133],"outperforms":[135],"local":[136],"classifiers":[137],"enables":[139],"extraction":[141],"coarse-grained":[144],"fine-grained":[146],"information":[147],"only":[149],"one":[150],"model.":[151],"full":[154],"evaluation":[155],"our":[157],"system":[158],"dataset":[161],"30":[163],"policies":[165],"annotated":[166],"by":[167],"legal":[168],"experts.":[169],"conclude":[171],"this":[173],"could":[175],"be":[176],"generalized":[177],"other":[179],"documents":[180],"as":[185],"means":[187],"improve":[189]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":16},{"year":2024,"cited_by_count":16},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":1}],"updated_date":"2026-04-02T15:55:50.835912","created_date":"2025-10-10T00:00:00"}