{"id":"https://openalex.org/W4393927934","doi":"https://doi.org/10.56553/popets-2024-0058","title":"A Bilingual Longitudinal Analysis of Privacy Policies Measuring the Impacts of the GDPR and the CCPA/CPRA","display_name":"A Bilingual Longitudinal Analysis of Privacy Policies Measuring the Impacts of the GDPR and the CCPA/CPRA","publication_year":2024,"publication_date":"2024-04-01","ids":{"openalex":"https://openalex.org/W4393927934","doi":"https://doi.org/10.56553/popets-2024-0058"},"language":"en","primary_location":{"id":"doi:10.56553/popets-2024-0058","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2024-0058","pdf_url":"https://petsymposium.org/popets/2024/popets-2024-0058.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://petsymposium.org/popets/2024/popets-2024-0058.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010041125","display_name":"Henry Hosseini","orcid":"https://orcid.org/0000-0002-9691-0329"},"institutions":[{"id":"https://openalex.org/I1317578790","display_name":"Federal Office for Information Security","ror":"https://ror.org/03v7mmm26","country_code":"DE","type":"other","lineage":["https://openalex.org/I1317578790"]},{"id":"https://openalex.org/I22465464","display_name":"University of M\u00fcnster","ror":"https://ror.org/00pd74e08","country_code":"DE","type":"education","lineage":["https://openalex.org/I22465464"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Henry Hosseini","raw_affiliation_strings":["University of M\u00fcnster",", of ,","for Information Security , Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of M\u00fcnster","institution_ids":["https://openalex.org/I22465464"]},{"raw_affiliation_string":", of ,","institution_ids":[]},{"raw_affiliation_string":"for Information Security , Germany","institution_ids":["https://openalex.org/I1317578790"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025891820","display_name":"Christine Utz","orcid":"https://orcid.org/0000-0003-4346-6911"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christine Utz","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048622314","display_name":"Martin Degeling","orcid":"https://orcid.org/0000-0001-7048-781X"},"institutions":[{"id":"https://openalex.org/I1317578790","display_name":"Federal Office for Information Security","ror":"https://ror.org/03v7mmm26","country_code":"DE","type":"other","lineage":["https://openalex.org/I1317578790"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Martin Degeling","raw_affiliation_strings":["Stiftung Neue Verantwortung",", of ,","for Information Security , Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Stiftung Neue Verantwortung","institution_ids":[]},{"raw_affiliation_string":", of ,","institution_ids":[]},{"raw_affiliation_string":"for Information Security , Germany","institution_ids":["https://openalex.org/I1317578790"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002527755","display_name":"Thomas Hupperich","orcid":"https://orcid.org/0000-0002-4981-9522"},"institutions":[{"id":"https://openalex.org/I1317578790","display_name":"Federal Office for Information Security","ror":"https://ror.org/03v7mmm26","country_code":"DE","type":"other","lineage":["https://openalex.org/I1317578790"]},{"id":"https://openalex.org/I22465464","display_name":"University of M\u00fcnster","ror":"https://ror.org/00pd74e08","country_code":"DE","type":"education","lineage":["https://openalex.org/I22465464"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Thomas Hupperich","raw_affiliation_strings":["University of M\u00fcnster",", of ,","for Information Security , Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of M\u00fcnster","institution_ids":["https://openalex.org/I22465464"]},{"raw_affiliation_string":", of ,","institution_ids":[]},{"raw_affiliation_string":"for Information Security , Germany","institution_ids":["https://openalex.org/I1317578790"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.7181,"has_fulltext":true,"cited_by_count":8,"citation_normalized_percentile":{"value":0.96248216,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"2024","issue":"2","first_page":"434","last_page":"463"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.8374000191688538,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.8374000191688538,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ccpa","display_name":"CCPA","score":0.5074431300163269},{"id":"https://openalex.org/keywords/privacy-policy","display_name":"Privacy policy","score":0.47753608226776123},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.36506664752960205},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.35767728090286255},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.32028958201408386},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3088144361972809},{"id":"https://openalex.org/keywords/medicine","display_name":"Medicine","score":0.23185446858406067},{"id":"https://openalex.org/keywords/internal-medicine","display_name":"Internal medicine","score":0.2153244912624359}],"concepts":[{"id":"https://openalex.org/C2781225136","wikidata":"https://www.wikidata.org/wiki/Q5009685","display_name":"CCPA","level":5,"score":0.5074431300163269},{"id":"https://openalex.org/C102938260","wikidata":"https://www.wikidata.org/wiki/Q1999831","display_name":"Privacy policy","level":3,"score":0.47753608226776123},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.36506664752960205},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.35767728090286255},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.32028958201408386},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3088144361972809},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.23185446858406067},{"id":"https://openalex.org/C126322002","wikidata":"https://www.wikidata.org/wiki/Q11180","display_name":"Internal medicine","level":1,"score":0.2153244912624359},{"id":"https://openalex.org/C2778938600","wikidata":"https://www.wikidata.org/wiki/Q389934","display_name":"Agonist","level":3,"score":0.0},{"id":"https://openalex.org/C67907053","wikidata":"https://www.wikidata.org/wiki/Q356147","display_name":"Adenosine receptor","level":4,"score":0.0},{"id":"https://openalex.org/C170493617","wikidata":"https://www.wikidata.org/wiki/Q208467","display_name":"Receptor","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.56553/popets-2024-0058","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2024-0058","pdf_url":"https://petsymposium.org/popets/2024/popets-2024-0058.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:figshare.com:article/25771329","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/A_Bilingual_Longitudinal_Analysis_of_Privacy_Policies_Measuring_the_Impacts_of_the_GDPR_and_the_CCPA_CPRA/25771329","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference contribution"},{"id":"doi:10.60882/cispa.25771329.v1","is_oa":true,"landing_page_url":"https://doi.org/10.60882/cispa.25771329.v1","pdf_url":null,"source":{"id":"https://openalex.org/S7407050916","display_name":"CISPA Helmholtz Center","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"ConferenceProceeding"}],"best_oa_location":{"id":"doi:10.56553/popets-2024-0058","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2024-0058","pdf_url":"https://petsymposium.org/popets/2024/popets-2024-0058.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3527251986","display_name":"FOR 5393: Die digitale Mittelstadt der Zukunft","funder_award_id":"462287308","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"}],"funders":[{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4393927934.pdf"},"referenced_works_count":59,"referenced_works":["https://openalex.org/W605474867","https://openalex.org/W1578874851","https://openalex.org/W1828401780","https://openalex.org/W1881708081","https://openalex.org/W1927727507","https://openalex.org/W2001082470","https://openalex.org/W2006604430","https://openalex.org/W2072644219","https://openalex.org/W2093605115","https://openalex.org/W2120101509","https://openalex.org/W2180240522","https://openalex.org/W2509343702","https://openalex.org/W2517394750","https://openalex.org/W2535603283","https://openalex.org/W2592228903","https://openalex.org/W2601243251","https://openalex.org/W2769124557","https://openalex.org/W2786672974","https://openalex.org/W2787106847","https://openalex.org/W2791737564","https://openalex.org/W2794674282","https://openalex.org/W2807329022","https://openalex.org/W2938979448","https://openalex.org/W2946516957","https://openalex.org/W2962940036","https://openalex.org/W2963611340","https://openalex.org/W2963995225","https://openalex.org/W2985295082","https://openalex.org/W2999830435","https://openalex.org/W3000190958","https://openalex.org/W3015767612","https://openalex.org/W3037109418","https://openalex.org/W3045153201","https://openalex.org/W3085592908","https://openalex.org/W3106386337","https://openalex.org/W3112015859","https://openalex.org/W3128086817","https://openalex.org/W3154337097","https://openalex.org/W3161163131","https://openalex.org/W3177181460","https://openalex.org/W3208601859","https://openalex.org/W3208891205","https://openalex.org/W3216667748","https://openalex.org/W4211152370","https://openalex.org/W4221142221","https://openalex.org/W4242721106","https://openalex.org/W4285583839","https://openalex.org/W4287813362","https://openalex.org/W4288076474","https://openalex.org/W4288086187","https://openalex.org/W4293093726","https://openalex.org/W4320560442","https://openalex.org/W4323076417","https://openalex.org/W4362452929","https://openalex.org/W4362704742","https://openalex.org/W4366549958","https://openalex.org/W4376626980","https://openalex.org/W4385571105","https://openalex.org/W4391285994"],"related_works":["https://openalex.org/W2116878667","https://openalex.org/W2528826491","https://openalex.org/W2879220619","https://openalex.org/W3042284153","https://openalex.org/W3038106605","https://openalex.org/W3024522029","https://openalex.org/W2260440995","https://openalex.org/W3195097297","https://openalex.org/W2035493462","https://openalex.org/W2166647055"],"abstract_inverted_index":{"Privacy":[0,46,51],"policies":[1,58,91,113,136,252,259],"are":[2,23,59,161,290],"the":[3,38,71,87,93,103,143,146,181,183,201,212,219,231,238,245,284],"main":[4],"mechanism":[5],"for":[6,180],"websites":[7,205,267],"to":[8,25,32,61,244,250,258,268,274],"describe":[9],"their":[10,242,287],"practices":[11],"in":[12,69,80,137,260,283],"collecting":[13],"and":[14,21,49,73,129,139,148,163,222,237,253],"processing":[15],"visitors'":[16],"personal":[17,288],"data.":[18],"Their":[19],"format":[20],"content":[22],"subject":[24],"legal":[26],"requirements":[27,185],"that":[28,141,160,172],"have":[29],"changed":[30],"due":[31],"recent":[33],"new":[34],"privacy":[35,57,90,112,135,151,285],"regulations":[36],"including":[37],"General":[39],"Data":[40],"Protection":[41],"Regulation":[42],"(GDPR),":[43],"California":[44,50,236],"Consumer":[45],"Act":[47,53],"(CCPA),":[48],"Rights":[52],"(CPRA).":[54],"Studying":[55],"how":[56],"adapted":[60],"such":[62],"regulatory":[63],"change":[64],"can":[65],"help":[66],"identify":[67],"shortcomings":[68],"implementing":[70],"law":[72],"inform":[74],"future":[75],"legislatory":[76],"initiatives.":[77],"Existing":[78],"work":[79],"this":[81,122,126,247],"area":[82],"mostly":[83],"studied":[84],"effects":[85,144],"of":[86,134,145,211,218,286],"GDPR":[88,147,263],"on":[89,150,167,271],"or":[92,117,170],"\"Do":[94,213],"Not":[95,214],"Sell":[96],"My":[97],"Personal":[98],"Information\"":[99],"link":[100,216],"mandated":[101,220],"by":[102,230],"CCPA.":[104],"Methodologically,":[105],"insights":[106],"were":[107,186],"mainly":[108],"drawn":[109],"from":[110,157],"English-language":[111,251],"using":[114,154],"keyword-based":[115],"analyses":[116],"machine":[118],"learning":[119],"classifiers.":[120],"In":[121],"work,":[123],"we":[124,265],"address":[125],"research":[127],"gap":[128],"conduct":[130],"a":[131],"bilingual":[132],"study":[133],"English":[138],"German":[140],"investigates":[142],"CCPA/CPRA":[149],"policy":[152],"content,":[153],"established":[155],"methods":[156],"corpus":[158],"linguistics":[159],"language-independent":[162],"do":[164],"not":[165,187,224,255],"rely":[166,270],"keyword":[168],"lists":[169],"classifiers":[171],"may":[173],"date":[174],"quickly.":[175],"We":[176],"find":[177,266],"that,":[178,204],"unlike":[179],"GDPR,":[182],"CCPA's":[184],"yet":[188],"widely":[189],"implemented":[190],"when":[191],"it":[192],"first":[193],"became":[194],"enforceable":[195],"but":[196],"only":[197],"with":[198],"its":[199],"amendment,":[200],"CPRA.":[202],"Before":[203],"used":[206],"more":[207],"than":[208],"60":[209],"variants":[210],"Sell\"":[215],"instead":[217],"wording":[221],"did":[223,240,254],"prominently":[225],"reference":[226],"individual":[227],"rights":[228],"granted":[229],"CCPA/CPRA.":[232],"While":[233],"companies":[234],"outside":[235],"US":[239],"adapt":[241],"disclosures":[243],"CCPA/CPRA,":[246],"was":[248],"limited":[249],"spill":[256],"over":[257],"German.":[261],"For":[262],"enforcement,":[264],"increasingly":[269],"legitimate":[272],"interests":[273,282],"justify":[275],"data":[276],"collection,":[277],"raising":[278],"concerns":[279],"whether":[280],"individuals'":[281],"information":[289],"still":[291],"sufficiently":[292],"considered.":[293]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":7}],"updated_date":"2026-07-27T08:26:11.824852","created_date":"2025-10-10T00:00:00"}