Modern privacy regulations provide a strict mandate for data processing entities to implement appropriate technical measures to demonstrate compliance. In practice, determining what measures are indeed "appropriate" is not trivial, particularly in light of vague guidelines provided by privacy regulations. To exacerbate the issue, challenges arise not only in the implementation of the technical measures themselves, but also in a variety of factors involving the roles, processes, decisions, and culture surrounding the pursuit of privacy compliance. In this paper, we present 33 challenges faced in the implementation of technical measures for privacy compliance, derived from a qualitative analysis of 16 interviews with privacy professionals. In addition, we evaluate the interview findings in a survey study, which gives way to a discussion of the identified challenges and their implications.

翻译：现代隐私法规严格要求数据处理实体采取适当的技术措施以证明合规性。实践中，确定何种措施确实"适当"并非易事，尤其鉴于隐私法规所提供的模糊指导。更严峻的是，挑战不仅源于技术措施本身的实施，还涉及围绕隐私合规追求的职责、流程、决策及文化等多重因素。本文通过对16位隐私专业人士的访谈进行定性分析，提出了隐私合规技术措施实施中面临的33项挑战。此外，我们在一项问卷调查研究中评估了访谈结果，并基于此对所识别挑战及其影响进行了讨论。