Privacy by designers: software developers’ privacy mindset

Irit Hadar, Tomer Hasson, Oshrat Ayalon, Eran Toch, Michael Birnhack, Sofia Sherman, Arod Balissa

Research output: Contribution to journalArticlepeer-review

Abstract

Privacy by design (PbD) is a policy measure that guides software developers to apply inherent solutions to achieve better privacy protection. For PbD to be a viable option, it is important to understand developers’ perceptions, interpretation and practices as to informational privacy (or data protection). To this end, we conducted in-depth interviews with 27 developers from different domains, who practice software design. Grounded analysis of the data revealed an interplay between several different forces affecting the way in which developers handle privacy concerns. Borrowing the schema of Social Cognitive Theory (SCT), we classified and analyzed the cognitive, organizational and behavioral factors that play a role in developers’ privacy decision making. Our findings indicate that developers use the vocabulary of data security to approach privacy challenges, and that this vocabulary limits their perceptions of privacy mainly to third-party threats coming from outside of the organization; that organizational privacy climate is a powerful means for organizations to guide developers toward particular practices of privacy; and that software architectural patterns frame privacy solutions that are used throughout the development process, possibly explaining developers’ preference of policy-based solutions to architectural solutions. Further, we show, through the use of the SCT schema for framing the findings of this study, how a theoretical model of the factors that influence developers’ privacy practices can be conceptualized and used as a guide for future research toward effective implementation of PbD.

Original languageAmerican English
Pages (from-to)259-289
Number of pages31
JournalEmpirical Software Engineering
Volume23
Issue number1
DOIs
StatePublished - 1 Feb 2018

Keywords

  • Data protection
  • Grounded analysis
  • Organizational climate
  • Privacy
  • Privacy by design
  • Qualitative research
  • Social cognitive theory

All Science Journal Classification (ASJC) codes

  • Software

Fingerprint

Dive into the research topics of 'Privacy by designers: software developers’ privacy mindset'. Together they form a unique fingerprint.

Cite this