Modelling GDPR-based Privacy Requirements with Software Engineering Diagrams: A Systematic Literature Review

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Vanezi, Evangelia, Kapitsaki, Georgia M., Philippou, Anna
Formato: Preprint
Publicado: 2026
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866916054918234112
author Vanezi, Evangelia
Kapitsaki, Georgia M.
Philippou, Anna
author_facet Vanezi, Evangelia
Kapitsaki, Georgia M.
Philippou, Anna
contents The application of the General Data Protection Regulation (GDPR) has significantly affected privacy requirements elicitation, modelling, and verification in Software Engineering (SE). One of the affected areas is requirements visualisation through modelling diagrams, which plays a crucial role in ensuring privacy compliance, as functional system requirements should be integrated with GDPR-based privacy requirements. We present a systematic literature review on how SE diagrams have been employed to capture and integrate GDPR-based privacy requirements into software system design. The study aims to identify the existing research landscape, existing gaps, and directions for future work. Following a rigorous search protocol and addressing two research questions, 18 primary studies published between 2017 and 2025 were selected, analysed, and categorised based on (i) the diagram types used, and (ii) the GDPR principles or rights addressed. The findings highlight the need for inter-diagram integration, full lifecycle traceability mechanisms, tool support, and automated compliance checking.
format Preprint
id arxiv_https___arxiv_org_abs_2604_16361
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle Modelling GDPR-based Privacy Requirements with Software Engineering Diagrams: A Systematic Literature Review
Vanezi, Evangelia
Kapitsaki, Georgia M.
Philippou, Anna
Software Engineering
The application of the General Data Protection Regulation (GDPR) has significantly affected privacy requirements elicitation, modelling, and verification in Software Engineering (SE). One of the affected areas is requirements visualisation through modelling diagrams, which plays a crucial role in ensuring privacy compliance, as functional system requirements should be integrated with GDPR-based privacy requirements. We present a systematic literature review on how SE diagrams have been employed to capture and integrate GDPR-based privacy requirements into software system design. The study aims to identify the existing research landscape, existing gaps, and directions for future work. Following a rigorous search protocol and addressing two research questions, 18 primary studies published between 2017 and 2025 were selected, analysed, and categorised based on (i) the diagram types used, and (ii) the GDPR principles or rights addressed. The findings highlight the need for inter-diagram integration, full lifecycle traceability mechanisms, tool support, and automated compliance checking.
title Modelling GDPR-based Privacy Requirements with Software Engineering Diagrams: A Systematic Literature Review
topic Software Engineering
url https://arxiv.org/abs/2604.16361