Modelling GDPR-based Privacy Requirements with Software Engineering Diagrams: A Systematic Literature Review

• URL: http://arxiv.org/abs/2604.16361v1
• Date: Thu, 19 Mar 2026 15:07:45 GMT
• Title: Modelling GDPR-based Privacy Requirements with Software Engineering Diagrams: A Systematic Literature Review
• Abstract summary: The application of the General Data Protection Regulation has significantly affected privacy requirements elicitation, modelling and verification in Software Engineering (SE)<n>We present a systematic literature review on how SE diagrams have been employed to capture and integrate privacy-based requirements into system design.<n>The findings highlight need for inter-diagram integration, full traceability, tool support and automated compliance checking.
• Score: 2.5616491738275435
• License: http://creativecommons.org/licenses/by-nc-nd/4.0/
• Abstract: The application of the General Data Protection Regulation (GDPR) has significantly affected privacy requirements elicitation, modelling, and verification in Software Engineering (SE). One of the affected areas is requirements visualisation through modelling diagrams, which plays a crucial role in ensuring privacy compliance, as functional system requirements should be integrated with GDPR-based privacy requirements. We present a systematic literature review on how SE diagrams have been employed to capture and integrate GDPR-based privacy requirements into software system design. The study aims to identify the existing research landscape, existing gaps, and directions for future work. Following a rigorous search protocol and addressing two research questions, 18 primary studies published between 2017 and 2025 were selected, analysed, and categorised based on (i) the diagram types used, and (ii) the GDPR principles or rights addressed. The findings highlight the need for inter-diagram integration, full lifecycle traceability mechanisms, tool support, and automated compliance checking.

Related papers

• Privacy by Design: Aligning GDPR and Software Engineering Specifications with a Requirements Engineering Approach [14.785943510581923]
  Legal knowledge should be captured in specifications to address the demands of different stakeholders and ensure compliance.<n>Existing approaches do not account for complex intersection between problem and solution space.
  arXiv  Detail & Related papers  (2025-10-24T15:59:34Z)
• A Comprehensive Survey on Benchmarks and Solutions in Software Engineering of LLM-Empowered Agentic System [56.40989626804489]
  This survey provides the first holistic analysis of Large Language Models-powered software engineering.<n>We review over 150 recent papers and propose a taxonomy along two key dimensions: (1) Solutions, categorized into prompt-based, fine-tuning-based, and agent-based paradigms, and (2) Benchmarks, including tasks such as code generation, translation, and repair.
  arXiv  Detail & Related papers  (2025-10-10T06:56:50Z)
• How do Pre-Trained Models Support Software Engineering? An Empirical Study in Hugging Face [52.257764273141184]
  Open-Source Pre-Trained Models (PTMs) provide extensive resources for various Machine Learning (ML) tasks.<n>These resources lack a classification tailored to Software Engineering (SE) needs.<n>We derive a taxonomy encompassing 147 SE tasks and apply an SE-oriented classification to PTMs in a popular open-source ML repository, Hugging Face (HF)<n>We find that code generation is the most common SE task among PTMs, while requirements engineering and software design activities receive limited attention.
  arXiv  Detail & Related papers  (2025-06-03T15:51:17Z)
• Federated Retrieval-Augmented Generation: A Systematic Mapping Study [11.931695766266879]
  Federated Retrieval-Augmented Generation (Federated RAG) combines Federated Learning (FL) with Retrieval-Augmented Generation (RAG)<n>RAG improves the factual accuracy of language models by grounding outputs in external knowledge.<n>This paper presents the first systematic mapping study of Federated RAG, covering literature published between 2020 and 2025.
  arXiv  Detail & Related papers  (2025-05-24T23:45:12Z)
• Data Requirement Goal Modeling for Machine Learning Systems [2.4140502941897544]
  This work proposes an approach to guide non-experts in identifying data requirements for Machine Learning systems.<n>We first develop the Data Requirement Goal Model (DRGM) by surveying the white literature.<n>We then validate the approach through two illustrative examples based on real-world projects.
  arXiv  Detail & Related papers  (2025-04-10T11:30:25Z)
• Retrieval Augmented Generation and Understanding in Vision: A Survey and New Outlook [85.43403500874889]
  Retrieval-augmented generation (RAG) has emerged as a pivotal technique in artificial intelligence (AI)<n>Recent advancements in RAG for embodied AI, with a particular focus on applications in planning, task execution, multimodal perception, interaction, and specialized domains.
  arXiv  Detail & Related papers  (2025-03-23T10:33:28Z)
• Personalized Generation In Large Model Era: A Survey [90.7579254803302]
  In the era of large models, content generation is gradually shifting to Personalized Generation (PGen)<n>This paper presents the first comprehensive survey on PGen, investigating existing research in this rapidly growing field.<n>By bridging PGen research across multiple modalities, this survey serves as a valuable resource for fostering knowledge sharing and interdisciplinary collaboration.
  arXiv  Detail & Related papers  (2025-03-04T13:34:19Z)
• Transparent NLP: Using RAG and LLM Alignment for Privacy Q&A [15.86510147965235]
  General Data Protection Regulation requires precise processing information to be clear and accessible.<n>This paper examines state-of-the-art Retrieval Generation (RAG) systems enhanced with alignment techniques to fulfill obligations.
  arXiv  Detail & Related papers  (2025-02-10T16:42:00Z)
• GDPR-Relevant Privacy Concerns in Mobile Apps Research: A Systematic Literature Review [1.9529165845805467]
  This article aims to provide a comprehensive overview of the existing research on privacy concerns in the context of mobile apps.<n>Our findings show that existing studies address three key privacy concerns: (i) direct collection of personal data from users, (ii) sharing of personal data with external entities, and (iii) analysis of user consent as a legal basis for collecting personal data.
  arXiv  Detail & Related papers  (2024-11-28T13:42:46Z)
• Model Generation with LLMs: From Requirements to UML Sequence Diagrams [9.114284818139069]
  This paper investigates the capability of ChatGPT to generate a specific type of model, i.e., sequence diagrams, from NL requirements. We examine the sequence diagrams generated by ChatGPT for 28 requirements documents of various types and from different domains. Our results indicate that, although the models generally conform to the standard and exhibit a reasonable level of understandability, their completeness and correctness with respect to the specified requirements often present challenges.
  arXiv  Detail & Related papers  (2024-04-09T15:07:25Z)
• Towards an Enforceable GDPR Specification [49.1574468325115]
  Privacy by Design (PbD) is prescribed by modern privacy regulations such as the EU's. One emerging technique to realize PbD is enforcement (RE) We present a set of requirements and an iterative methodology for creating formal specifications of legal provisions.
  arXiv  Detail & Related papers  (2024-02-27T09:38:51Z)
• Towards Automated Process Planning and Mining [77.34726150561087]
  We present a research project in which researchers from the AI and BPM field work jointly together. We discuss the overall research problem, the relevant fields of research and our overall research framework to automatically derive process models.
  arXiv  Detail & Related papers  (2022-08-18T16:41:22Z)
• Wizard of Search Engine: Access to Information Through Conversations with Search Engines [58.53420685514819]
  We make efforts to facilitate research on CIS from three aspects. We formulate a pipeline for CIS with six sub-tasks: intent detection (ID), keyphrase extraction (KE), action prediction (AP), query selection (QS), passage selection (PS) and response generation (RG) We release a benchmark dataset, called wizard of search engine (WISE), which allows for comprehensive and in-depth research on all aspects of CIS.
  arXiv  Detail & Related papers  (2021-05-18T06:35:36Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.