Models Trump Code: An Empirical Analysis of GDPR Compliance

Submitted to the 2026 ACM SIGSAC Conference on Computer and Communications Security (CCS ’26), November 15–19, 2026, The Hague, Netherlands This artifact repository contains the extended version of the published paper and the materials used in the graduate-level security engineering course described in the paper. These materials include: The extended version of the paper. Exercise and lab assignments designed to introduce students to the NuActionGUI tool and the Python/Flask framework. Project description and implementation templates for the Event Platform, covering both the νActionGUI and Python/Flask, together with the master solutions and a representative subset of the evaluation test cases. The post-study questionnaire is also included. The provided materials support independent inspection and replication of the course setup and project tasks described in the paper. Due to data protection restrictions, we cannot share the complete test set as well as the participant data collected during the study. More instructions can be found in the main README.md at the root directory of the artifacts. License This artifact is released under the MIT License.