CV

Education

• Ph.D. in Privacy Engineering, Universidad Politécnica de Madrid, 2025
  Thesis: “Contributions to the Automated Assessment of Mobile Applications’ Compliance with Privacy and Data Protection Requirements”
• M.Sc. in Cybersecurity, Universidad Politécnica de Madrid, 2022
• B.Sc. in Telecommunications Engineering, Universidad Politécnica de Madrid, 2021

Work experience

• Assistant Professor, Universidad Politécnica de Madrid — (2025 – Present)
  Member of the STRAST research group (Sistemas de Tiempo Real y Arquitectura de Servicios Telemáticos).
  Teaching duties in the undergraduate course ADSW (Software Analysis and Design), Escuela Técnica Superior de Ingenieros de Telecomunicación.

• Teaching Assistant, Universidad Politécnica de Madrid — (2023 – 2025)
  Member of the STRAST research group (Sistemas de Tiempo Real y Arquitectura de Servicios Telemáticos).
  Teaching duties in the undergraduate course ADSW (Software Analysis and Design), Escuela Técnica Superior de Ingenieros de Telecomunicación.

• Research Assistant, Universidad Politécnica de Madrid — (2021 – 2023)
  Member of the STRAST research group (Sistemas de Tiempo Real y Arquitectura de Servicios Telemáticos). Supervised by Professor José María del Álamo.

Research Visits

• Carnegie Mellon University, School of Computer Science — (Sep–Dec 2023)
  Visiting Ph.D. student under the supervision of Prof. Norman Sadeh (Pittsburgh, USA).
  Research collaboration on privacy policy analysis using large language models. ⟶ This collaboration (starting on 2022) resulted in seven co-authored publications, including papers at PETS and high impact journals.
• King’s College London, Department of Informatics — (Sep–Dec 2024)
  Visiting Ph.D. student working with Prof. William Seymour and Prof. Jose Such (London, UK).
  Research on automated policy compliance evaluation in custom GPT-based systems, resulting in a publication in Array.

Academic Service

• Program Co-Chair, International Workshop on Privacy Engineering (IWPE 2026)
• Publicity Chair, International Workshop on Privacy Engineering (IWPE 2025)

Skills

• Privacy Engineering
  • GDPR & data protection compliance
  • Data flow analysis (static & dynamic)
  • Privacy policy auditing
• Software Analysis & Design
  • UML, design patterns, version control (Git)
  • Agile & team-based development
  • Teaching experience
• Programming & Tooling
  • Python, Java, Bash
  • Frida, mitmproxy, ADB
  • RabbitMQ, Docker
• Natural Language Processing
  • Privacy policy classification
  • LLM prompting (GPT, Claude, etc.)
  • Text mining and labeling
• Research & Writing
  • Academic paper writing (PETS, IEEE, Springer)
  • Dataset creation and reproducibility
  • Experience presenting at international conferences
• Communication
  • Public speaking (oral & poster presentations)
  • Teaching and mentoring
  • English: C1 (accredited)

Publications

Overcoming Language Barriers: Multilingual Analysis of the 2023 Swiss Privacy Law’s Impact

L. Nenadic, D. Rodriguez, J.A. Calandrino. "Overcoming Language Barriers: Multilingual Analysis of the 2023 Swiss Privacy Law's Impact." Proceedings on Privacy Enhancing Technologies, 2026(4), 703-723. https://doi.org/10.56553/popets-2026-0141

Digital Markets and Hidden Noncompliance

A. Zac, S. Bechtold, P. Wey, D. Rodríguez, J.M. Del Alamo. "Digital Markets and Hidden Noncompliance." Journal of Legal Studies, 55(2), 433-461, 2026. https://doi.org/10.1086/742146

Towards Safer Chatbots: Automated Policy Compliance Evaluation of Custom GPTs

D. Rodriguez, W. Seymour, J.M. Del Alamo, J. Such. "Towards Safer Chatbots: Automated Policy Compliance Evaluation of Custom GPTs." Array, 30 (2026), 100834. https://doi.org/10.1016/j.array.2026.100834

GPT vs Human Legal Text Annotations: A Comparative Study with Privacy Policies

D. Cevallos-Salas, J. Estrada-Jiménez, D. S. Guamán, D. Rodriguez, Jose M. Del Alamo. "GPT vs Human Legal Text Annotations: A Comparative Study with Privacy Policies." Artificial Intelligence and Law, 2025. https://doi.org/10.1007/s10506-025-09488-0

Privacy Settings of Third-Party Libraries in Android Apps: A Study of Facebook SDKs

D Rodriguez, JA Calandrino, JM Del Alamo, N Sadeh. "Privacy Settings of Third-Party Libraries in Android Apps: A Study of Facebook SDKs." Proceedings on Privacy Enhancing Technologies, 2025(2). https://doi.org/10.56553/popets-2025-0056

Anycast and Third-party Libraries: A Recipe for a Privacy Disaster?

H. Pascual, J.M. Del Alamo, D. Rodriguez, J.C. Dueñas. "Anycast and Third-party Libraries: A Recipe for a Privacy Disaster?" IEEE Communications Magazine, 2025. https://doi.org/10.1109/MCOM.006.2400576

Large Language Models: A New Approach for Privacy Policy Analysis at Scale

D. Rodriguez, I. Yang, J.M. Del Alamo, N. Sadeh. "Large Language Models: A New Approach for Privacy Policy Analysis at Scale." Computing (2024). https://doi.org/10.1007/s00607-024-01331-9

Data Retention Disclosures in the Google Play Store: Opacity Remains the Norm

D. Rodríguez, C. Fernández-Aller, J.M. Del Alamo, N. Sadeh. "Data Retention Disclosures in the Google Play Store: Opacity Remains the Norm." IEEE EuroS&P Workshops 2024. https://doi.org/10.1109/EuroSPW61312.2024.00009

Hunter: Tracing Anycast Communications to Uncover Cross-Border Personal Data Transfers

H. Pascual, J.M. del Alamo, D. Rodriguez, J.C. Dueñas. "Hunter: Tracing Anycast Communications to Uncover Cross-Border Personal Data Transfers." Computers & Security, 141 (2024), 103823. https://doi.org/10.1016/j.cose.2024.103823

Sharing is Not Always Caring: Delving Into Personal Data Transfer Compliance in Android Apps

D. Rodriguez, J.M. Del Alamo, C. Fernández-Aller, N. Sadeh. "Sharing is Not Always Caring: Delving Into Personal Data Transfer Compliance in Android Apps." IEEE Access, 12 (2024). https://doi.org/10.1109/ACCESS.2024.3349425

ROI: A Method for Identifying Organizations Receiving Personal Data

D. Rodriguez, J.M. Del Alamo, M. Cozar, B. García. "ROI: A Method for Identifying Organizations Receiving Personal Data." Computing 106, 163–184 (2024). https://doi.org/10.1007/s00607-023-01209-2

Comparing Privacy Label Disclosures of Apps Published in Both the App Store and Google Play Stores

D. Rodriguez, A. Jain, J.M. Del Alamo, N. Sadeh. "Comparing Privacy Label Disclosures of Apps Published in Both the App Store and Google Play Stores." IEEE EuroS&P Workshops 2023. https://doi.org/10.1109/EuroSPW59978.2023.00022

ATLAS: Automatically Detecting Discrepancies Between Privacy Policies and Privacy Labels

A. Jain, D. Rodriguez, J.M. Del Alamo, N. Sadeh. "ATLAS: Automatically Detecting Discrepancies Between Privacy Policies and Privacy Labels." IEEE EuroS&P Workshops 2023. https://doi.org/10.1109/EuroSPW59978.2023.00016

Automated GDPR Compliance Assessment for Cross-Border Personal Data Transfers in Android Applications

D.S. Guamán, D. Rodriguez, J.M. del Alamo, J. Such. "Automated GDPR Compliance Assessment for Cross-Border Personal Data Transfers in Android Applications." Computers & Security, 130 (2023), 103262. https://doi.org/10.1016/j.cose.2023.103262

Reliability of IP Geolocation Services for Assessing the Compliance of International Data Transfers

M. Cozar, D. Rodriguez, J.M. Del Alamo, D. Guaman. "Reliability of IP Geolocation Services for Assessing the Compliance of International Data Transfers." IEEE EuroS&P Workshops 2022. https://doi.org/10.1109/EuroSPW55150.2022.00024

Talks

From Claims to Reality: Measuring Data Protection Compliance in Mobile Apps

March 12, 2026

invited_talk at SPRINT Workshop on AI Security and Privacy 2026, Valencia, Spain

Privacy and Accountability in the Femtech Industry in Europe

December 18, 2025

invited_talk at Privacy and Accountability in the Femtech Industry in Europe, Universidad Complutense de Madrid, Spain

Privacy Settings of Third-Party Libraries in Android Apps: A Study of Facebook SDKs

July 16, 2025

presentation at Privacy Enhancing Technologies Symposium 2025 (PETs), Washington D.C., United States

Privacy Engineering Research: Tools and Methods for GDPR Compliance Assessment

October 30, 2024

talk at Guest Seminar at Queen Mary University of London, London, United Kingdom

Data Retention Disclosures in the Google Play Store: Opacity Remains the Norm

July 08, 2024

presentation at International Workshop on Privacy Engineering (IWPE 2024), Vienna, Austria

A Multi-Faceted, At-Scale Analysis of Apps Privacy Disclosures in the Apple and Google App stores

October 24, 2023

presentation at CyLab Partners Conference 2023, Carnegie Mellon University, Pittsburgh, USA

Comparing Privacy Label Disclosures of Apps Published in Both the App Store and Google Play Stores

July 03, 2023

presentation at International Workshop on Privacy Engineering (IWPE 2023), Delft, Netherlands

Identifying Organizations Receiving Personal Data in Android Apps

July 14, 2022

talk at 19th International Conference on Security and Cryptography (SECRYPT 2022), Lisbon, Portugal

Reliability of IP Geolocation Services for Assessing the Compliance of International Data Transfers

June 06, 2022

presentation at International Workshop on Privacy Engineering (IWPE 2022), Genoa, Italy

Teaching

Social, Ethical and Legal Aspects of Data and Artificial Intelligence

Software Analysis and Design – Análisis y Diseño de Software (ADSW)