The paper addresses the over-reliance on GDPR in digital privacy research by systematically normalizing heterogeneous global data protection laws into a unified, data-lifecycle-aligned abstraction.

The paper introduces GDPRuler, a trusted middleware system that enables verifiable GDPR compliance for key-value stores on untrusted cloud environments without requiring modifications to the core data…

The paper develops a comprehensive, GDPR-aligned item bank of 527 statements to accurately measure user preferences regarding specific regulatory protections, addressing a gap left by older privacy me…

This paper proposes a Fisher information density (FID)-constrained trajectory sharing scheme for robot collision avoidance under GDPR regulations, achieving better privacy-utility tradeoff than fixed-…

This paper identifies and conceptualizes common and divergent regulatory data protection requirements (RDPRs) worldwide using interviews with legal experts and content analysis of data protection regu…

This paper provides a systematic regulatory mapping and compliance architecture for AI agents operating under the complex web of EU laws, concluding that high-risk agents with untraceable behavioral d…

The paper proposes a privacy-preserving visual monitoring system that performs object detection and generates natural language alerts entirely on an edge device, ensuring GDPR compliance by never tran…

The paper introduces APLiance, a novel ABAC framework that models privacy policies as access requests and checks their compliance against legal requirements by mapping law sections to ABAC rules.

This paper introduces a formal framework using multiparty session types to model and verify purpose compliance in distributed systems under GDPR.

This paper analyzes digital privacy risks in IoT ecosystems, proposing a comprehensive framework (AURA-IoT) and taxonomy to mitigate threats using advanced privacy-enhancing technologies.

The paper proposes that party autonomy can be used to determine the applicable law for non-contractual obligations arising from cross-border data transfers by aligning it with the law chosen for the r…

This paper investigates privacy risks associated with credential disclosure in the upcoming EU Digital Identity Wallet, demonstrating that users tend to overshare information, and proposes a Credentia…

The paper evaluates web tracking across ten countries, finding that opt-in jurisdictions (like the EU) generally enforce stronger privacy protections, significantly reducing tracker connections compar…

This study empirically analyzed 41 mobile gaming apps, finding that while device ID disclosures were relatively consistent, location and personal information disclosures showed significant mismatches…

The paper analyzes current and proposed age verification methods and proposes an alternative using open standards and cryptography to achieve secure, privacy-preserving age checking.

The paper introduces a novel realization-level privacy filtering approach that improves utility in differentially private data release by accounting for actual leakage rather than worst-case per-round…

The paper introduces UMBRA, a novel system that detects evolved and subtle dark patterns in cookie consent banners, demonstrating that systematic non-compliance and user autonomy erosion are widesprea…

This paper reviews recent EU AI regulatory documents to clarify definitions and synthesize current provisions regarding security, privacy, and autonomous agentic AI.

This survey analyzes privacy-enhancing encryption technologies (ABE, PRE, SE) for data sharing, proposing a comprehensive framework, identifying potential attacks, and evaluating their multi-dimension…

The paper proposes the User Data Sharing System (UDSS), a hardware-anchored middleware that securely manages PII exchange across diverse consumer electronics devices, significantly reducing onboarding…