Curriculum Vitæ

  • Since April 2018: Postdoctoral researcher in the Critical Information Infrastructures research group at the Institute of Applied Informatics and Formal Description Methods (AIFB) of the Karlsruhe Institute of Technology (KIT).
  • 19/12/2017: Successful dissertation defense (Doctor of Economic and Social Sciences; Dr. rer. pol.). Topic: "Communication of Information Privacy Practices in Consumer Information Systems"
  • 03/2016 - 03/2018: Research associate at the Chair for Information Systems and Systems Engineering at the University of Kassel.
  • 02/2012-02/2016: Research associate at the Department of Information Systems and System Development of the University of Cologne.
  • 12/2009 - 11/2011: Student assistant at Lehrstuhl V: Diskrete Optimierung of the Technische Universität Dortmund: Software development
  • 05/2007 - 11/2009: Student assistant at the Computer Science Department of the University of Cologne: Software development
  • 10/2006 - 01/2012: Studies of Information Systems at the University of Cologne. Diploma thesis: "Analysis, conceptual design and implementation of a web application providing patient-friendly aggregation and refinement of information in patient information leaflets"

Research Interests

  • Information privacy
  • Information systems decentralzation
  • User-centered information systems design



  • Sunyaev A, Dehling T, Strahringer S, Da Xu L, Heinig M, Perscheid M, Alt R, Rossi M (2023) The future of enterprise information systems. Business & Information Systems Engineering.
  • Goram M, Dehling T, Morsbach F, Sunyaev A (2023) Human-centered design for data-sparse tailored privacy information provision. Gerber N, Stöver A, Marky K, eds. Human Factors in Privacy Research. (Springer International Publishing, Cham, Switzerland), 283–298.
  • Dehling T, Sunyaev A (2023) A design theory for transparency of information privacy practices. Information Systems Research ePub ahead of print August 8:1–22.


  • Bartsch J, Dehling T, Lauf F, Meister S, Sunyaev A (2022) Let the computer say NO! The neglected potential of policy definition languages for data sovereignty. Friedewald M, Kreutzer M, Hansen M, eds. Selbstbestimmung, Privatheit und Datenschutz : Gestaltungsoptionen für einen europäischen Weg. (Springer Fachmedien Wiesbaden, Wiesbaden, Germany), 449–468.


  • Morsbach F, Dehling T, Sunyaev A (2021) Architecture Matters: Investigating the Influence of Differential Privacy on Neural Network Design. Presented at NeurIPS 2021 Workshop on Privacy in Machine Learning (PriML 2021). (Virtual Conference).
  • Yari IA, Dehling T, Kluge F, Geck J, Sunyaev A, Eskofier B (2021) Security Engineering of Patient-Centered Health Care Information Systems in Peer-to-Peer Environments: Systematic Review. Journal of Medical Internet Research 23(11):e24460.
  • Yari IA, Dehling T, Kluge F, Eskofier B, Sunyaev A (2021) Online at Will: A Novel Protocol for Mutual Authentication in Peer-to-Peer Networks for Patient-Centered Health Care Information Systems. Proceedings of the 54th Hawaii International Conference on System Sciences (HICSS 2021). (Virtual Conference). (Best Paper Award).


  • Bartsch J, Dehling T, Lauf F, Meister S, Sunyaev A (2020) Let the Computer Say NO! The Neglected Potential of Policy Definition Languages for Data Sovereignty. Proceedings Forum Privatheit. (Virtual Conference).
  • Goram M, Veiel D, Dehling T, Sunyaev A (2020) What Users Really Want to Know from Privacy Notices: A Comparison of Approaches for Personalized Privacy Information Provision. Proceedings Forum Privatheit. (Virtual Conference).
  • Kannengießer N, Lins S, Dehling T, Sunyaev A (2020) Trade-offs between distributed ledger technology characteristics. ACM Computing Surveys 52(2):42:1-42:37.


  • Dehling T, Zhang Y, Sunyaev A (2019) Consumer Perceptions of Online Behavioral Advertising. Proceedings of the 21st IEEE Conference on Business Informatics. (IEEE, Moscow, Russia).
  • Dehling T, Lins S, Sunyaev A (2019) Security of Critical Information Infrastructures. Reuter C, ed. Information Technology for Peace and Security: IT Applications and Infrastructures in Conflicts, Crises, War, and Peace. (Springer Fachmedien Wiesbaden, Wiesbaden, Germany), 319–339.
  • Kannengießer N, Lins S, Dehling T, Sunyaev A (2019) What Does Not Fit Can be Made to Fit! Trade-Offs in Distributed Ledger Technology Designs. Proceedings of the 52nd Hawaii International Conference on System Sciences (HICSS 2019). (Wailea, Maui, HI, USA). (Best Paper Nomination).
  • Brüggemann T, Dehling T, Sunyaev A (2019) No Risk, More Fun! Automating Breach of Confidentiality Risk Assessment for Android Mobile Health Applications. Proceedings of the 52nd Hawaii International Conference on System Sciences (HICSS 2019). (Wailea, Maui, HI, USA).
  • Labazova O, Dehling T, Sunyaev A (2019) From Hype to Reality: A Taxonomy of Blockchain Applications. Proceedings of the 52nd Hawaii International Conference on System Sciences (HICSS 2019). (Wailea, Maui, HI, USA).


  • Sunyaev A, Dehling T, Schmidt-Kraepelin M (2018) Verbraucherorientierter Datenschutz: Identifizierung von Verbraucherarchetypen zur effektiven Kommunikation von Datenschutzpraktiken. Bala C, Schuldzinski W, eds. Jenseits des Otto Normalverbrauchers: Verbraucherpolitik in Zeiten des “unmanageable consumer.” Beiträge zur Verbraucherforschung. (Verbraucherzentrale, Düsseldorf, Germany), 163–179.
  • Tomforde S, Dehling T, Haux R, Huseljic D, Kottke D, Scheerbaum J, Sick B, Sunyaev A, Wolf KH (2018) Towards Proactive Health-Enabling Living Environments: Simulation-Based Study and Research Challenges. Proceedings of the 31st International Conference on Architecture of Computing Systems. (VDE Verlag, Braunschweig, Germany).
  • Kromat T, Dehling T, Haux R, Peters C, Sick B, Tomforde S, Wolf KH, Sunyaev A (2018) Gestaltungsraum für proaktive Smart Homes zur Gesundheitsförderung. Proceedings MKWI 2018. (Lüneburg, Germany).
  • Grube A, Dehling T, Klein K, Sunyaev A (2018) Promoting Use of Patient-Centered Health IT: Assessment and Ranking of Incentive Mechanisms. Proceedings of the 51th Hawaii International Conference on System Sciences (HICSS 2018). (Waikoloa, Big Island, Hawaii).


  • Morana S, Dehling T, Reuter-Oppermann M, Sunyaev A (2017) User Assistance for Health Care Information Systems. 2017 SIG-Health Pre-ICIS Workshop. (Seoul, South Korea).
  • Grube A, Dehling T, Sunyaev A (2017) How Do Patients Expect Apps to Provide Drug Information? Proceedings of the 50th Hawaii International Conference on System Science (HICSS 2017). (Big Island, Hawaii), 3577–3585.
  • Klaus-Hendrik Wolf, Tobias Dehling, Reinhold Haux, Bernhard Sick, Ali Sunyaev, Sven Tomforde (2017) On Methodological and Technological Challenges for Proactive Health Management in Smart Homes. Studies in Health Technology and Informatics 238:209–212.


  • Tobias Dehling, Manuel Schmidt-Kraepelin, Muhammed Demircan, Jakub Szefer, Ali Sunyaev (2016) User Archetypes for Effective Information Privacy Communication. Proceedings of the Pre-ICIS Workshop on Information Security and Privacy. (AIS, Dublin, Ireland).
  • Brüggemann T, Hansen J, Dehling T, Sunyaev A (2016) An Information Privacy Risk Index for mHealth Apps. Schiffner S, Serna J, Ikonomou D, Rannenberg K, eds. Proceedings of the 4th Annual Privacy Forum. (Springer International Publishing, Frankfurt (Main), Germany), 190–201.
  • Thiebes S, Dehling T, Sunyaev A (2016) One Size Does Not Fit All: Information Security and Information Privacy for Genomic Cloud Services. Proceedings of 24th European Conference on Information Systems (ECIS 2016). (Istanbul, Turkey).


  • Sunyaev A, Dehling T, Taylor PL, Mandl KD (2015) Availability and Quality of Mobile Health App Privacy Policies. Journal of the American Medical Informatics Association 22(e1):e28–e33.
  • Dehling T, Gao F, Schneider S, Sunyaev A (2015) Exploring the Far Side of Mobile Health: Information Security and Privacy of Mobile Health Applications on iOS and Android. JMIR mHealth uHealth 3(1):e8.
  • Mrosek R, Dehling T, Sunyaev A (2015) Taxonomy of Health IT and Medication Adherence. Health Policy and Technology 4(3):215–224.


  • Dehling T, Gao F, Sunyaev A (2014) Assessment Instrument for Privacy Policy Content: Design and Evaluation of PPC. Proceedings of the Pre-ICIS Workshop on Information Security and Privacy. (Auckland, New Zealand), 1–16.
  • Gao F, Dehling T, Sunyaev A (2014) Useful Privacy Policy Content - Research Outline and First Results. Proceedings of the Pre-ECIS 2014 eHealth Workshop. (Tel Aviv, Israel).
  • Schmidt-Kraepelin M, Dehling T, Sunyaev A (2014) Usability of Patient-Centered Health IT: Mixed-Methods Usability Study of ePill. Proceedings of the eHealth 2014 (eHealth 2014). (Vienna, Austria).
  • Blesik T, Dehling T, Sunyaev A (2014) Improving Comprehensibility of Medical Information - Proof-of-Concept for Patient Information Leaflets. Proceedings of Multikonferenz Wirtschaftsinformatik (MKWI 2014). (Paderborn, Germany).
  • Dehling T, Sunyaev A (2014a) Information Security and Privacy of Patient-Centered Health IT Services: What needs to be done? Proceedings of the 47th Hawaii International Conference on System Sciences (HICSS 2014). (Big Island, Hawaii, USA).
  • Dehling T, Sunyaev A (2014b) Secure Provision of Patient-Centered Health Information Technology Services in Public Networks—Leveraging Security and Privacy Features Provided by the German Nationwide Health Information Technology Infrastructure. Electronic Markets (EM) 24(2):89–99.


  • Dehling T, Sunyaev A (2013a) Improved Medication Compliance through Health IT: Design and Mixed Methods Evaluation of the ePill Application. Proceedings of the 34th International Conference on Information Systems (ICIS 2013). (Milano, Italy).
  • Dehling T, Sunyaev A (2013b) Fostering Information Privacy Control: Privacy Policy Content of Health-Related Apps. 2nd Workshop on Information Privacy and Security - An ICIS 2013 Ancillary Event (2nd JIPS Workshop). (Milano, Italy).
  • Dehling T, Sunyaev A (2013c) German Health Information Technology Infrastructure: A Large-Scale Network Offering Support for Software Engineering in Health Care (University of Cologne, Cologne, Germany).


  • Dehling T, Sunyaev A (2012a) Architecture and Design of a Patient-Friendly eHealth Web Application: Patient Information Leaflets and Supplementary Services. Proceedings of the 18th Americas Conference on Information Systems (AMCIS 2012). (Seattle, Washington, U.S), 5.
  • Dehling T, Sunyaev A (2012b) Information Security of Patient-Centred Services Utilising the German Nationwide Health Information Technology Infrastructure. Proceedings of the 3rd USENIX Workshop on Health Security and Privacy (HealthSec’12). (Bellevue, WA, U.S.).
  • Dehling T, Sunyaev A (2012c) Domain-Specific Languages and Digital Preservation: Supporting Knowledge-Management. Proceedings of Multikonferenz Wirtschaftsinformatik (MKWI 2012). (Braunschweig, Germany), 1273–1284.


  • Best reviewer nomination at International Conference on Wirtschaftsinformatik (March 2021)
  • Best paper award at Hawaii International Conference on System Sciences (January 2021)
  • Best paper nomination at Hawaii International Conference on System Sciences (January 2019)
  • Award for most excellent dissertation by the German Association for Data Protection and Data Security (GDD) (November 2018)
  • Award for most excellent dissertation at the Faculty of Economics and Management of the University of Kassel (Wissenschaftspreis) (June 2018)
  • AIS SIGSEC Doctoral Student Award (December 2016)
  • Information Systems Undergraduate Award, University of Cologne (December 2008)

Invited Talks

  • Gesundheitsdaten auf der Blockchain; Workshop Distributed Ledger Technology; Kassel, Germany; March 1, 2017.
  • Kommunikation von Datenschutzpraktiken im Kontext von mHealth Anwendungen; GI-Regionalgruppe Köln: Themenabend "Datenschutz- und Datensicherheit“; Cologne, Germany; November 30, 2016.
  • Toward Transparent Privacy Practices: Facilitating Comparisons of Privacy Policies; Data Transparency Lab 2015 Conference; Cambridge, MA, USA; November 16, 2015.

Personal Pages on other Sites