There's very little procurement research out there so I read a lot of conference proceedings and anyway this one is super fun because it reinforces that, at least in the US regulatory environment, universities can't confirm anything vendors promise about data privacy. Neat!
