Privacy Policies in Medium-Sized European Town Administrations: A Comparative Analysis of English and German-Speaking Countries

Hosseini, Henry


Abstract

The General Data Protection Regulation (GDPR) has been in force since May 2018. Organizations and individuals must comply with this legislation if they collect or process the personal information of residents of the European Union. Prior research has focused on the examination of the privacy policies of the most frequently visited websites or mobile applications with the highest number of installations. The present study assesses the privacy policies of a less explored field: medium-sized town administrations. For this purpose, we analyzed and evaluated 644 privacy policies collected in Austria, Germany, and Ireland, focusing on their coverage of different data practice categories and GDPR-related dictionary phrases. We employed semi-automated data collection methods, deep learning and NLP techniques, and manual labor to perform this analysis. Our findings provide insight into the privacy policy landscape of medium-sized town administrations, where Austria and Germany exhibit a higher average coverage of GDPR data practice categories than Ireland.

Keywords
GDPR; Privacy Policies; Medium-Sized Towns



Publication type
Research article in proceedings (conference)

Peer reviewed
Yes

Publication status
Published

Year
2025

Conference
International Conference on Information Systems Security and Privacy

Venue
Porto

Volume
2

Book title
Proceedings of the 11th International Conference on Information Systems Security and Privacy (ICISSP)

Editor
Di Pietro, Roberto; Renaud, Karen; Mori, Paolo

Start page
60

End page
71

Publisher
SciTePress

Place
Portugal

Language
English

ISSN
2184-4356

ISBN
978-989-758-735-1

DOI

Full text