{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:SCFM67CBHXZPVCGYS46C76RT53","short_pith_number":"pith:SCFM67CB","canonical_record":{"source":{"id":"1906.12038","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2019-06-28T04:40:10Z","cross_cats_sorted":[],"title_canon_sha256":"f4a7b8174f8a1b78353a9041cbcf569bc46ce65231570b4fc83ef706ff857787","abstract_canon_sha256":"f6383d43795506d3adad11af13555f84f53808f650edaa0e7b1565cf28807f47"},"schema_version":"1.0"},"canonical_sha256":"908acf7c413df2fa88d8973c2ffa33eee4c0579e2ab31d992d1cbb576499677d","source":{"kind":"arxiv","id":"1906.12038","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.12038","created_at":"2026-05-17T23:41:59Z"},{"alias_kind":"arxiv_version","alias_value":"1906.12038v1","created_at":"2026-05-17T23:41:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.12038","created_at":"2026-05-17T23:41:59Z"},{"alias_kind":"pith_short_12","alias_value":"SCFM67CBHXZP","created_at":"2026-05-18T12:33:27Z"},{"alias_kind":"pith_short_16","alias_value":"SCFM67CBHXZPVCGY","created_at":"2026-05-18T12:33:27Z"},{"alias_kind":"pith_short_8","alias_value":"SCFM67CB","created_at":"2026-05-18T12:33:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:SCFM67CBHXZPVCGYS46C76RT53","target":"record","payload":{"canonical_record":{"source":{"id":"1906.12038","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2019-06-28T04:40:10Z","cross_cats_sorted":[],"title_canon_sha256":"f4a7b8174f8a1b78353a9041cbcf569bc46ce65231570b4fc83ef706ff857787","abstract_canon_sha256":"f6383d43795506d3adad11af13555f84f53808f650edaa0e7b1565cf28807f47"},"schema_version":"1.0"},"canonical_sha256":"908acf7c413df2fa88d8973c2ffa33eee4c0579e2ab31d992d1cbb576499677d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:41:59.467758Z","signature_b64":"BromiDnuIFBCk2fvhNliVhbvKd2Q2a2fN25PNm6xIM77LBZDkTGmFcYy75Nfc5eExJsdfW9R5OcPPsCcdiQxAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"908acf7c413df2fa88d8973c2ffa33eee4c0579e2ab31d992d1cbb576499677d","last_reissued_at":"2026-05-17T23:41:59.467350Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:41:59.467350Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1906.12038","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:41:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SMefVoQesYrFPRlfCs/i43kdvUrJhTPIARu5HXGuJ0r4dJiOWQ++6kPZYCroeIz4mLNO7gmToBJBHfDm3lU4DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-27T02:51:33.038173Z"},"content_sha256":"e193b220651acab0f7d033bdd0deb567cdeaa80f31c44ab723db251d457c54e6","schema_version":"1.0","event_id":"sha256:e193b220651acab0f7d033bdd0deb567cdeaa80f31c44ab723db251d457c54e6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:SCFM67CBHXZPVCGYS46C76RT53","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Analyzing GDPR Compliance Through the Lens of Privacy Policy","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CY","authors_text":"Jayashree Mohan, Melissa Wasserman, Vijay Chidambaram","submitted_at":"2019-06-28T04:40:10Z","abstract_excerpt":"With the arrival of the European Union's General Data Protection Regulation (GDPR), several companies are making significant changes to their systems to achieve compliance. The changes range from modifying privacy policies to redesigning systems which process personal data. This work analyzes the privacy policies of large-scaled cloud services which seek to be GDPR compliant. The privacy policy is the main medium of information dissemination between the data controller and the users. We show that many services that claim compliance today do not have clear and concise privacy policies. We ident"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.12038","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:41:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jk9nJzZ2FxLiJbUnVDnynKIt7FmWctyljdN5ncvGP3RGDsb4gCHiTiI/TYTki/0le3yuM1xiNjsAg+gNqzrkCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-27T02:51:33.038532Z"},"content_sha256":"e9a2dbaa991c7afdfabb2d2bbe8cac74fa2cd8b7fd7e8bd95e2c3fbe5d0516d7","schema_version":"1.0","event_id":"sha256:e9a2dbaa991c7afdfabb2d2bbe8cac74fa2cd8b7fd7e8bd95e2c3fbe5d0516d7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SCFM67CBHXZPVCGYS46C76RT53/bundle.json","state_url":"https://pith.science/pith/SCFM67CBHXZPVCGYS46C76RT53/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SCFM67CBHXZPVCGYS46C76RT53/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-27T02:51:33Z","links":{"resolver":"https://pith.science/pith/SCFM67CBHXZPVCGYS46C76RT53","bundle":"https://pith.science/pith/SCFM67CBHXZPVCGYS46C76RT53/bundle.json","state":"https://pith.science/pith/SCFM67CBHXZPVCGYS46C76RT53/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SCFM67CBHXZPVCGYS46C76RT53/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:SCFM67CBHXZPVCGYS46C76RT53","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f6383d43795506d3adad11af13555f84f53808f650edaa0e7b1565cf28807f47","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2019-06-28T04:40:10Z","title_canon_sha256":"f4a7b8174f8a1b78353a9041cbcf569bc46ce65231570b4fc83ef706ff857787"},"schema_version":"1.0","source":{"id":"1906.12038","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.12038","created_at":"2026-05-17T23:41:59Z"},{"alias_kind":"arxiv_version","alias_value":"1906.12038v1","created_at":"2026-05-17T23:41:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.12038","created_at":"2026-05-17T23:41:59Z"},{"alias_kind":"pith_short_12","alias_value":"SCFM67CBHXZP","created_at":"2026-05-18T12:33:27Z"},{"alias_kind":"pith_short_16","alias_value":"SCFM67CBHXZPVCGY","created_at":"2026-05-18T12:33:27Z"},{"alias_kind":"pith_short_8","alias_value":"SCFM67CB","created_at":"2026-05-18T12:33:27Z"}],"graph_snapshots":[{"event_id":"sha256:e9a2dbaa991c7afdfabb2d2bbe8cac74fa2cd8b7fd7e8bd95e2c3fbe5d0516d7","target":"graph","created_at":"2026-05-17T23:41:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"With the arrival of the European Union's General Data Protection Regulation (GDPR), several companies are making significant changes to their systems to achieve compliance. The changes range from modifying privacy policies to redesigning systems which process personal data. This work analyzes the privacy policies of large-scaled cloud services which seek to be GDPR compliant. The privacy policy is the main medium of information dissemination between the data controller and the users. We show that many services that claim compliance today do not have clear and concise privacy policies. We ident","authors_text":"Jayashree Mohan, Melissa Wasserman, Vijay Chidambaram","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2019-06-28T04:40:10Z","title":"Analyzing GDPR Compliance Through the Lens of Privacy Policy"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.12038","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e193b220651acab0f7d033bdd0deb567cdeaa80f31c44ab723db251d457c54e6","target":"record","created_at":"2026-05-17T23:41:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f6383d43795506d3adad11af13555f84f53808f650edaa0e7b1565cf28807f47","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2019-06-28T04:40:10Z","title_canon_sha256":"f4a7b8174f8a1b78353a9041cbcf569bc46ce65231570b4fc83ef706ff857787"},"schema_version":"1.0","source":{"id":"1906.12038","kind":"arxiv","version":1}},"canonical_sha256":"908acf7c413df2fa88d8973c2ffa33eee4c0579e2ab31d992d1cbb576499677d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"908acf7c413df2fa88d8973c2ffa33eee4c0579e2ab31d992d1cbb576499677d","first_computed_at":"2026-05-17T23:41:59.467350Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:41:59.467350Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"BromiDnuIFBCk2fvhNliVhbvKd2Q2a2fN25PNm6xIM77LBZDkTGmFcYy75Nfc5eExJsdfW9R5OcPPsCcdiQxAg==","signature_status":"signed_v1","signed_at":"2026-05-17T23:41:59.467758Z","signed_message":"canonical_sha256_bytes"},"source_id":"1906.12038","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e193b220651acab0f7d033bdd0deb567cdeaa80f31c44ab723db251d457c54e6","sha256:e9a2dbaa991c7afdfabb2d2bbe8cac74fa2cd8b7fd7e8bd95e2c3fbe5d0516d7"],"state_sha256":"b6fca1643626c92b15565a9a215f72ecdef8492f9329dee09c3f0f3d02dab302"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/0etIzRVUN6bDPG3KUs+5CuIoj7V9nZ2md/jaKe/H2AbPj0L1dhgK1ddDQ9I+N+GX9b9CdfNYWIaYvqFFOqlDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-27T02:51:33.041346Z","bundle_sha256":"b835445c1e761ccef0a5c7c01e9ecd06a9d6b102712a9144b37c91161cea9b7f"}}