一句话：提出面向 Android 应用的 LLM 驱动 GDPR 合规检查，关注隐私政策在代码中的实现。
Android 应用每天大量收集设备中的敏感个人数据。尽管欧盟 GDPR 等法规严格，许多应用仍不合规。既有研究多关注隐私政策本身的合规性，较少检查这些政策在真实代码中的实现，且已有工作范围有限。本文提出面向 Android 应用的 LLM 驱动 GDPR 合规检查方向，旨在利用大语言模型检查 GDPR 要求如何映射到应用代码实现。摘要未给出具体方法细节或评估结果，属于问题提出与方向探索性工作。
Android apps extensively collect sensitive personal data from our devices daily. Despite stringent regulations like the European Union's General Data Protection Regulation (GDPR), many applications (apps) fail to comply with these legal requirements. While previous studies have focused on the compliance of privacy policies, checking how these policies are implemented in the actual code has not yet been extensively investigated. Moreover, previous efforts have often been limited in scope.
@inproceedings{paperbot9140,
title = {Toward LLM-Driven GDPR Compliance Checking for Android Apps},
author = {Marco Alecci and Nicolas Sannier and Marcello Ceci and Sallam Abualhaija and Jordan Samhi and Domenico Bianculli and Tegawendé Bissyandé and Jacques Klein},
booktitle = {FSE},
year = {2025},
doi = {10.1145/3696630.3728508}
}