Privacy by designers: software developers’ privacy mindset

  • Irit Hadar
  • Tomer Hasson
  • Oshrat Ayalon
  • Eran Toch
  • Michael Birnhack
  • Sofia Sherman
  • Arod Balissa
Article

DOI: 10.1007/s10664-017-9517-1

Cite this article as:
Hadar, I., Hasson, T., Ayalon, O. et al. Empir Software Eng (2017). doi:10.1007/s10664-017-9517-1

Abstract

Privacy by design (PbD) is a policy measure that guides software developers to apply inherent solutions to achieve better privacy protection. For PbD to be a viable option, it is important to understand developers’ perceptions, interpretation and practices as to informational privacy (or data protection). To this end, we conducted in-depth interviews with 27 developers from different domains, who practice software design. Grounded analysis of the data revealed an interplay between several different forces affecting the way in which developers handle privacy concerns. Borrowing the schema of Social Cognitive Theory (SCT), we classified and analyzed the cognitive, organizational and behavioral factors that play a role in developers’ privacy decision making. Our findings indicate that developers use the vocabulary of data security to approach privacy challenges, and that this vocabulary limits their perceptions of privacy mainly to third-party threats coming from outside of the organization; that organizational privacy climate is a powerful means for organizations to guide developers toward particular practices of privacy; and that software architectural patterns frame privacy solutions that are used throughout the development process, possibly explaining developers’ preference of policy-based solutions to architectural solutions. Further, we show, through the use of the SCT schema for framing the findings of this study, how a theoretical model of the factors that influence developers’ privacy practices can be conceptualized and used as a guide for future research toward effective implementation of PbD.

Keywords

Data protection Privacy Privacy by design Qualitative research Grounded analysis Social cognitive theory Organizational climate 

Funding information

Funder NameGrant NumberFunding Note
Israel Science Foundation
  • 1116/12

Copyright information

© Springer Science+Business Media New York 2017

Authors and Affiliations

  • Irit Hadar
    • 1
  • Tomer Hasson
    • 1
  • Oshrat Ayalon
    • 2
  • Eran Toch
    • 2
  • Michael Birnhack
    • 3
  • Sofia Sherman
    • 1
  • Arod Balissa
    • 3
  1. 1.Department of Information SystemsUniversity of HaifaHaifaIsrael
  2. 2.Faculty of EngineeringTel Aviv UniversityTel AvivIsrael
  3. 3.Faculty of LawTel Aviv UniversityTel AvivIsrael

Personalised recommendations