@inproceedings{Bre09b, author = {Travis D. Breaux}, affiliation = {North Carolina State University}, title = {Exercising Due Diligence in Legal Requirements Acquisition: A Tool-supported, Frame-based Approach}, year = {2009}, month = {September}, booktitle = {RE'09: Proceedings of the 17th IEEE International Requirements Engineering Conference (RE'09)}, publisher = {IEEE Society Press}, address = {Washington, DC, USA}, pages = {225-230}, location = {Atlanta, Georgia}, abstract = {Government laws and organizational policies introduce critical legal requirements that govern information systems. Unlike traditional requirements elicited from stakeholders, legal requirements have unique characteristics that software engineers must address to ensure that their systems are demonstrably compliant with relevant laws and policies. This paper introduces: important terminology for developing legally compliant software systems; and a methodology consisting of procedures and models for acquiring, representing and analyzing phenomena in legal documents, which constitute rich sources of legal requirements. Based on a grounded theory, the method has been validated through a mixed-methods approach consisting of multiple, descriptive case studies and a human subject experiment. The case studies address two domains governed by the U.S. Health Insurance Portability and Accountability Act and U.S. Electronic and Information Technology Accessibility Standards. The human subject experiment tests a fundamental part of the theory to understand the efficacy of multiple users applying the method to a sample regulation text.}}