Skip to main content

On Understanding How Developers Perceive and Interpret Privacy Requirements Research Preview

  • Conference paper
  • First Online:
Requirements Engineering: Foundation for Software Quality (REFSQ 2020)

Abstract

[Context and motivation] Ensuring privacy of users’ data has become a top concern in software development, either to satisfy users’ needs or to comply with privacy laws. The problem may increase by the time a new law is in the vacancy period, and companies are working to understand how to comply with it. In addition, research has shown that many developers do not have sufficient knowledge about how to develop privacy-sensitive software. [Question/problem] Motivated by this scenario, this research investigates the personal factors affecting the developers’ understanding of privacy requirements during the vacancy period of a data protection law. [Principal ideas/results] We conducted thirteen interviews in six different private companies. As a result, we found nine personal factors affecting how software developers perceive and interpret privacy requirements. [Contribution] The identification of the personal factors contributes to the elaboration of effective methods for promoting proper privacy-sensitive software development.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 39.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Notes

  1. 1.

    We generalize the term developer to those who work in software development.

  2. 2.

    Supplementary Material: https://marianapmaia.github.io/REFSQ2020/.

References

  1. Bandura, A.: Social Foundations of Thought and Action. Prentice-Hall, Inc., Englewood Cliffs (1986)

    Google Scholar 

  2. Cavoukian, A.: Privacy by design: the 7 foundational principles. Inf. Priv. Commissioner Ontario Canada 5 (2009)

    Google Scholar 

  3. del Alamo, J.M., Martín, Y.-S., Caiza, J.C.: Towards organizing the growing knowledge on privacy engineering. In: Hansen, M., Kosta, E., Nai-Fovino, I., Fischer-Hübner, S. (eds.) Privacy and Identity 2017. IAICT, vol. 526, pp. 15–24. Springer, Cham (2018). https://doi.org/10.1007/978-3-319-92925-5_2

    Chapter  Google Scholar 

  4. GDPR: General data protection regulation (2018). https://eugdpr.org/

  5. Hadar, I., et al.: Privacy by designers: software developers’ privacy mindset. Empir. Softw. Eng. 23(1), 259–289 (2018)

    Article  Google Scholar 

  6. Kalloniatis, C., Kavakli, E., Gritzalis, S.: Addressing privacy requirements in system design: the pris method. Requir. Eng. 13(3), 241–255 (2008)

    Article  Google Scholar 

  7. LGPD: General Law on Personal Data Protection/Lei Geral de Protecao de Dados n. 13.709 (2018). http://www.planalto.gov.br/ccivil_03/_ato2015-2018/2018/lei/L13709.htm

  8. Peixoto, M., Silva, C., Lima, R., Araújo, J., Gorschek, T., Silva, J.: PCM tool: privacy requirements specification in agile software development. In: 10th Brazilian Software Conference: Theory and Practice (CBSoft 2019), pp. 108–113. SBC (2019)

    Google Scholar 

  9. Runeson, P., Höst, M.: Guidelines for conducting and reporting case study research in software engineering. Empir. Softw. Eng. 14(2), 131 (2009)

    Article  Google Scholar 

  10. Spiekermann, S., Cranor, L.F.: Engineering privacy. IEEE Trans. Software Eng. 35(1), 67–82 (2008)

    Article  Google Scholar 

  11. Strauss, A., Corbin, J.: Basics of Qualitative Research Techniques. Sage Publications, Thousand Oaks (1998)

    Google Scholar 

  12. Van Der Sype, Y.S., Maalej, W.: On lawful disclosure of personal user data: what should app developers do? In: International Workshop on Requirements Engineering and Law (RELAW), pp. 25–34. IEEE (2014)

    Google Scholar 

Download references

Acknowledgments

This study was financed in part by the Coordenação de Aperfeiçoamento de Pessoal de Nível Superior - Brasil (CAPES) - Finance Code 001, supported by the S.E.R.T research profile, (see rethought.se, kks.se), and NOVA LINCS Research Laboratory (Ref. UID/CEC/04516/2019).

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Mariana Peixoto .

Editor information

Editors and Affiliations

1 Electronic supplementary material

Below is the link to the electronic supplementary material.

Supplementary material 1 (pdf 71 KB)

Rights and permissions

Reprints and permissions

Copyright information

© 2020 Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Peixoto, M. et al. (2020). On Understanding How Developers Perceive and Interpret Privacy Requirements Research Preview. In: Madhavji, N., Pasquale, L., Ferrari, A., Gnesi, S. (eds) Requirements Engineering: Foundation for Software Quality. REFSQ 2020. Lecture Notes in Computer Science(), vol 12045. Springer, Cham. https://doi.org/10.1007/978-3-030-44429-7_8

Download citation

  • DOI: https://doi.org/10.1007/978-3-030-44429-7_8

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-030-44428-0

  • Online ISBN: 978-3-030-44429-7

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics