CV

Education

• Ph.D in Privacy Engineering, Universidad Politécnica de Madrid, 2025 (expected)
  Thesis: “Contributions to the automated assessment of ICT systems compliance with privacy and data protection requirements”
• M.Sc. in Cybersecurity, Universidad Politécnica de Madrid, 2022
• B.Sc. in Telecommunications Engineering, Universidad Politécnica de Madrid, 2021

Work experience

• Teaching Assistant, Universidad Politécnica de Madrid — (2023 – Present)
  Member of the STRAST research group (Sistemas de Tiempo Real y Arquitectura de Servicios Telemáticos).
  Teaching duties in the undergraduate course ADSW (Software Analysis and Design), Escuela Técnica Superior de Ingenieros de Telecomunicación.

• Research Assistant, Universidad Politécnica de Madrid — (2021 – 2023)
  Member of the STRAST research group (Sistemas de Tiempo Real y Arquitectura de Servicios Telemáticos). Supervised by Professor José María del Álamo.

Research Visits

• Carnegie Mellon University, School of Computer Science — Sep–Dec 2023
  Visiting Ph.D. student under the supervision of Prof. Norman Sadeh (Pittsburgh, USA).
  Research collaboration on privacy policy analysis using large language models. ⟶ This collaboration (starting on 2022) resulted in seven co-authored publications, including papers at PETS and high impact journals.
• King’s College London, Department of Informatics — Sep–Dec 2024
  Visiting Ph.D. student working with Prof. William Seymour and Prof. Jose Such (London, UK).
  (Ongoing) research on evaluating policy compliance in custom GPT-based systems.

Academic Service

• Publicity Chair, International Workshop on Privacy Engineering (IWPE 2025)

Skills

• Privacy Engineering
  • GDPR & data protection compliance
  • Data flow analysis (static & dynamic)
  • Privacy policy auditing
• Software Analysis & Design
  • UML, design patterns, version control (Git)
  • Agile & team-based development
  • Teaching experience
• Programming & Tooling
  • Python, Java, Bash
  • Frida, mitmproxy, ADB
  • RabbitMQ, Docker
• Natural Language Processing
  • Privacy policy classification
  • LLM prompting (GPT, Claude, etc.)
  • Text mining and labeling
• Research & Writing
  • Academic paper writing (PETS, IEEE, Springer)
  • Dataset creation and reproducibility
  • Experience presenting at international conferences
• Communication
  • Public speaking (oral & poster presentations)
  • Teaching and mentoring
  • English: C1 (accredited)

Publications

Privacy Settings of Third-Party Libraries in Android Apps: A Study of Facebook SDKs

D Rodriguez, JA Calandrino, JM Del Alamo, N Sadeh. "Privacy Settings of Third-Party Libraries in Android Apps: A Study of Facebook SDKs." Proceedings on Privacy Enhancing Technologies, 2025(2). https://doi.org/10.56553/popets-2025-0056

Anycast and Third-party Libraries: A Recipe for a Privacy Disaster?

H. Pascual, J.M. Del Alamo, D. Rodriguez, J.C. Dueñas. "Anycast and Third-party Libraries: A Recipe for a Privacy Disaster?" IEEE Communications Magazine, 2025. https://doi.org/10.1109/MCOM.006.2400576

Large Language Models: A New Approach for Privacy Policy Analysis at Scale

D. Rodriguez, I. Yang, J.M. Del Alamo, N. Sadeh. "Large Language Models: A New Approach for Privacy Policy Analysis at Scale." Computing (2024). https://doi.org/10.1007/s00607-024-01331-9

Data Retention Disclosures in the Google Play Store: Opacity Remains the Norm

D. Rodríguez, C. Fernández-Aller, J.M. Del Alamo, N. Sadeh. "Data Retention Disclosures in the Google Play Store: Opacity Remains the Norm." IEEE EuroS&P Workshops 2024. https://doi.org/10.1109/EuroSPW61312.2024.00009

Hunter: Tracing Anycast Communications to Uncover Cross-Border Personal Data Transfers

H. Pascual, J.M. del Alamo, D. Rodriguez, J.C. Dueñas. "Hunter: Tracing Anycast Communications to Uncover Cross-Border Personal Data Transfers." Computers & Security, 141 (2024), 103823. https://doi.org/10.1016/j.cose.2024.103823

Sharing is Not Always Caring: Delving Into Personal Data Transfer Compliance in Android Apps

D. Rodriguez, J.M. Del Alamo, C. Fernández-Aller, N. Sadeh. "Sharing is Not Always Caring: Delving Into Personal Data Transfer Compliance in Android Apps." IEEE Access, 12 (2024). https://doi.org/10.1109/ACCESS.2024.3349425

ROI: A Method for Identifying Organizations Receiving Personal Data

D. Rodriguez, J.M. Del Alamo, M. Cozar, B. García. "ROI: A Method for Identifying Organizations Receiving Personal Data." Computing 106, 163–184 (2024). https://doi.org/10.1007/s00607-023-01209-2

Comparing Privacy Label Disclosures of Apps Published in Both the App Store and Google Play Stores

D. Rodriguez, A. Jain, J.M. Del Alamo, N. Sadeh. "Comparing Privacy Label Disclosures of Apps Published in Both the App Store and Google Play Stores." IEEE EuroS&P Workshops 2023. https://doi.org/10.1109/EuroSPW59978.2023.00022

ATLAS: Automatically Detecting Discrepancies Between Privacy Policies and Privacy Labels

A. Jain, D. Rodriguez, J.M. Del Alamo, N. Sadeh. "ATLAS: Automatically Detecting Discrepancies Between Privacy Policies and Privacy Labels." IEEE EuroS&P Workshops 2023. https://doi.org/10.1109/EuroSPW59978.2023.00016

Automated GDPR Compliance Assessment for Cross-Border Personal Data Transfers in Android Applications

D.S. Guamán, D. Rodriguez, J.M. del Alamo, J. Such. "Automated GDPR Compliance Assessment for Cross-Border Personal Data Transfers in Android Applications." Computers & Security, 130 (2023), 103262. https://doi.org/10.1016/j.cose.2023.103262

Reliability of IP Geolocation Services for Assessing the Compliance of International Data Transfers

M. Cozar, D. Rodriguez, J.M. Del Alamo, D. Guaman. "Reliability of IP Geolocation Services for Assessing the Compliance of International Data Transfers." IEEE EuroS&P Workshops 2022. https://doi.org/10.1109/EuroSPW55150.2022.00024

Talks

Privacy Engineering Research: Tools and Methods for GDPR Compliance Assessment

October 30, 2024

talk at Guest Seminar at Queen Mary University of London, London, United Kingdom

Data Retention Disclosures in the Google Play Store: Opacity Remains the Norm

July 08, 2024

presentation at International Workshop on Privacy Engineering (IWPE 2024), Vienna, Austria

A Multi-Faceted, At-Scale Analysis of Apps Privacy Disclosures in the Apple and Google App stores

October 24, 2023

presentation at CyLab Partners Conference 2023, Carnegie Mellon University, Pittsburgh, USA

Comparing Privacy Label Disclosures of Apps Published in Both the App Store and Google Play Stores

July 03, 2023

presentation at International Workshop on Privacy Engineering (IWPE 2023), Delft, Netherlands

Identifying Organizations Receiving Personal Data in Android Apps

July 14, 2022

talk at 19th International Conference on Security and Cryptography (SECRYPT 2022), Lisbon, Portugal

Reliability of IP Geolocation Services for Assessing the Compliance of International Data Transfers

June 06, 2022

presentation at International Workshop on Privacy Engineering (IWPE 2022), Genoa, Italy

Teaching

Social, Ethical and Legal Aspects of Data and Artificial Intelligence

Software Analysis and Design – Análisis y Diseño de Software (ADSW)