{"id":"https://openalex.org/W4416570876","doi":"https://doi.org/10.3390/jcp5040103","title":"Privacy in Flux: A 35-Year Systematic Review of Legal Evolution, Effectiveness, and Global Challenges (U.S./E.U. Focus with International Comparisons)","display_name":"Privacy in Flux: A 35-Year Systematic Review of Legal Evolution, Effectiveness, and Global Challenges (U.S./E.U. Focus with International Comparisons)","publication_year":2025,"publication_date":"2025-11-22","ids":{"openalex":"https://openalex.org/W4416570876","doi":"https://doi.org/10.3390/jcp5040103"},"language":"en","primary_location":{"id":"doi:10.3390/jcp5040103","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040103","pdf_url":"https://www.mdpi.com/2624-800X/5/4/103/pdf?version=1763979201","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"type":"review","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2624-800X/5/4/103/pdf?version=1763979201","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120469021","display_name":"Kong Phang","orcid":"https://orcid.org/0009-0002-7660-2107"},"institutions":[{"id":"https://openalex.org/I125467818","display_name":"Dakota State University","ror":"https://ror.org/016yv6y68","country_code":"US","type":"education","lineage":["https://openalex.org/I125467818"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kong Phang","raw_affiliation_strings":["Beacom College of Computer and Cyber Sciences, Dakota State University, Madison, SD 57042, USA","The Beacom College of Computer and Cyber Sciences, Dakota State University Madison, SD 57042, USA"],"raw_orcid":"https://orcid.org/0009-0002-7660-2107","affiliations":[{"raw_affiliation_string":"Beacom College of Computer and Cyber Sciences, Dakota State University, Madison, SD 57042, USA","institution_ids":["https://openalex.org/I125467818"]},{"raw_affiliation_string":"The Beacom College of Computer and Cyber Sciences, Dakota State University Madison, SD 57042, USA","institution_ids":["https://openalex.org/I125467818"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031601362","display_name":"Jihene Kaabi","orcid":"https://orcid.org/0000-0002-9677-9607"},"institutions":[{"id":"https://openalex.org/I125467818","display_name":"Dakota State University","ror":"https://ror.org/016yv6y68","country_code":"US","type":"education","lineage":["https://openalex.org/I125467818"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Jihene Kaabi","raw_affiliation_strings":["Beacom College of Computer and Cyber Sciences, Dakota State University, Madison, SD 57042, USA","The Beacom College of Computer and Cyber Sciences, Dakota State University Madison, SD 57042, USA"],"raw_orcid":"https://orcid.org/0000-0002-9677-9607","affiliations":[{"raw_affiliation_string":"Beacom College of Computer and Cyber Sciences, Dakota State University, Madison, SD 57042, USA","institution_ids":["https://openalex.org/I125467818"]},{"raw_affiliation_string":"The Beacom College of Computer and Cyber Sciences, Dakota State University Madison, SD 57042, USA","institution_ids":["https://openalex.org/I125467818"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5031601362"],"corresponding_institution_ids":["https://openalex.org/I125467818"],"apc_list":{"value":1000,"currency":"CHF","value_usd":1207},"apc_paid":{"value":1000,"currency":"CHF","value_usd":1207},"fwci":1.1381,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.79218472,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"5","issue":"4","first_page":"103","last_page":"103"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.2597000002861023,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.2597000002861023,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.14090000092983246,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12943","display_name":"COVID-19 Digital Contact Tracing","score":0.14030000567436218,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.6413000226020813},{"id":"https://openalex.org/keywords/interoperability","display_name":"Interoperability","score":0.5845000147819519},{"id":"https://openalex.org/keywords/harmonization","display_name":"Harmonization","score":0.5591999888420105},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.49889999628067017},{"id":"https://openalex.org/keywords/data-protection-act-1998","display_name":"Data Protection Act 1998","score":0.44859999418258667},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.399399995803833},{"id":"https://openalex.org/keywords/latin-americans","display_name":"Latin Americans","score":0.38920000195503235},{"id":"https://openalex.org/keywords/law-enforcement","display_name":"Law enforcement","score":0.3497999906539917},{"id":"https://openalex.org/keywords/systematic-review","display_name":"Systematic review","score":0.32190001010894775}],"concepts":[{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.6413000226020813},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.5845000147819519},{"id":"https://openalex.org/C2779962950","wikidata":"https://www.wikidata.org/wiki/Q5659376","display_name":"Harmonization","level":2,"score":0.5591999888420105},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.49889999628067017},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.49869999289512634},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.44859999418258667},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.43070000410079956},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.399399995803833},{"id":"https://openalex.org/C158886217","wikidata":"https://www.wikidata.org/wiki/Q16799549","display_name":"Latin Americans","level":2,"score":0.38920000195503235},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3521000146865845},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.3504999876022339},{"id":"https://openalex.org/C2780262971","wikidata":"https://www.wikidata.org/wiki/Q44554","display_name":"Law enforcement","level":2,"score":0.3497999906539917},{"id":"https://openalex.org/C189708586","wikidata":"https://www.wikidata.org/wiki/Q1504425","display_name":"Systematic review","level":3,"score":0.32190001010894775},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.3174999952316284},{"id":"https://openalex.org/C3090818","wikidata":"https://www.wikidata.org/wiki/Q1172506","display_name":"General Data Protection Regulation","level":3,"score":0.3174000084400177},{"id":"https://openalex.org/C141972696","wikidata":"https://www.wikidata.org/wiki/Q1247836","display_name":"Privacy law","level":4,"score":0.3140999972820282},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.2985000014305115},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.29679998755455017},{"id":"https://openalex.org/C190253527","wikidata":"https://www.wikidata.org/wiki/Q295354","display_name":"Law and economics","level":1,"score":0.2809000015258789},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.2800000011920929},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.27630001306533813},{"id":"https://openalex.org/C193934123","wikidata":"https://www.wikidata.org/wiki/Q7246028","display_name":"Privacy by Design","level":3,"score":0.2750000059604645},{"id":"https://openalex.org/C2777855551","wikidata":"https://www.wikidata.org/wiki/Q12310021","display_name":"Subject (documents)","level":2,"score":0.2743000090122223},{"id":"https://openalex.org/C55587333","wikidata":"https://www.wikidata.org/wiki/Q1133029","display_name":"Engineering ethics","level":1,"score":0.2703000009059906},{"id":"https://openalex.org/C207267971","wikidata":"https://www.wikidata.org/wiki/Q120208","display_name":"Emerging technologies","level":2,"score":0.2655999958515167},{"id":"https://openalex.org/C102938260","wikidata":"https://www.wikidata.org/wiki/Q1999831","display_name":"Privacy policy","level":3,"score":0.2646999955177307},{"id":"https://openalex.org/C2777351106","wikidata":"https://www.wikidata.org/wiki/Q49371","display_name":"Legislation","level":2,"score":0.26260000467300415},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.2603999972343445}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/jcp5040103","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040103","pdf_url":"https://www.mdpi.com/2624-800X/5/4/103/pdf?version=1763979201","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:f01476360c894aca8b593bfa5d0fd055","is_oa":true,"landing_page_url":"https://doaj.org/article/f01476360c894aca8b593bfa5d0fd055","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cybersecurity and Privacy, Vol 5, Iss 4, p 103 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/jcp5040103","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040103","pdf_url":"https://www.mdpi.com/2624-800X/5/4/103/pdf?version=1763979201","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4416570876.pdf","grobid_xml":"https://content.openalex.org/works/W4416570876.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Privacy":[0],"harms":[1,23],"have":[2,103],"expanded":[3],"alongside":[4],"rapid":[5],"technological":[6],"change,":[7],"challenging":[8],"the":[9,59,124,160],"adequacy":[10],"of":[11,76],"existing":[12],"regulatory":[13],"frameworks.":[14],"This":[15,152],"systematic":[16],"review":[17,153],"(1990\u20132025)":[18],"systematically":[19],"maps":[20],"documented":[21],"privacy":[22,176],"to":[24],"specific":[25],"legal":[26,56,168],"mechanisms":[27],"and":[28,37,53,62,69,86,92,99,107,117,127,148,167,170],"observed":[29],"enforcement":[30,105],"outcomes":[31],"across":[32,58],"jurisdictions,":[33],"using":[34],"PRISMA-guided":[35],"methods":[36],"ROBIS":[38],"risk-of-bias":[39],"assessment.":[40],"We":[41,112],"synthesize":[42],"evidence":[43],"on":[44,123],"major":[45],"regimes":[46],"(e.g.,":[47],"GDPR,":[48],"COPPA,":[49],"CCPA,":[50],"HIPAA,":[51],"GLBA)":[52],"conduct":[54],"comparative":[55],"analysis":[57],"U.S.,":[60],"E.U.,":[61],"underexplored":[63],"regions":[64],"in":[65,82],"Asia,":[66],"Latin":[67],"America,":[68],"Africa.":[70],"Key":[71],"findings":[72],"indicate":[73],"increased":[74],"recognition":[75],"data":[77,84,95],"subject":[78],"rights,":[79],"persistent":[80],"gaps":[81],"cross-border":[83],"governance,":[85],"emerging":[87,165],"risks":[88],"from":[89],"AI/ML/LLMs,":[90],"IoT,":[91],"blockchain,":[93],"including":[94],"breaches,":[96],"algorithmic":[97],"discrimination,":[98],"surveillance.":[100],"While":[101,121],"regulations":[102],"advanced,":[104],"variability":[106],"fragmented":[108],"standards":[109],"limit":[110],"effectiveness.":[111],"propose":[113],"strategies":[114],"for":[115,158,173],"harmonization":[116],"risk-based,":[118],"technology-neutral":[119],"safeguards.":[120],"focusing":[122],"U.S.":[125],"sectoral":[126],"E.U.":[128],"comprehensive":[129],"models,":[130],"we":[131],"include":[132],"targeted":[133],"comparisons":[134],"with":[135],"Canada":[136],"(PIPEDA),":[137],"Australia":[138],"(Privacy":[139],"Act/APPs),":[140],"Japan":[141],"(APPI),":[142],"India":[143],"(DPDPA),":[144],"Africa":[145],"(POPIA/NDPR/Kenya":[146],"DPA),":[147],"ASEAN":[149],"interoperability":[150],"instruments.":[151],"presents":[154],"an":[155],"evidence-based":[156],"framework":[157],"understanding":[159],"interplay":[161],"between":[162],"evolving":[163],"harms,":[164],"technologies,":[166],"protections,":[169],"identifies":[171],"priorities":[172],"strengthening":[174],"global":[175],"governance.":[177]},"counts_by_year":[{"year":2026,"cited_by_count":3}],"updated_date":"2026-08-23T07:36:19.812096","created_date":"2025-11-25T00:00:00"}
