Privacy Requirements Specification in Agile Software Development
2021 (English)In: Proceedings of the IEEE International Conference on Requirements Engineering / [ed] Moreira A., Schneider K., Vierhauser M., Cleland-Huang J., IEEE Computer Society , 2021, p. 512-513Conference paper, Published paper (Refereed)
Abstract [en]
Privacy has become a concern in Agile Software Development (ASD), either to satisfy users' needs or to comply with privacy laws. However, recent studies have shown that ASD approaches still neglect non-functional requirements (NFRs), as is the privacy case. This concern and new data protection laws that came into force recently led companies to face the challenges to understand the laws and to comply with them. In addition, research has shown that many developers do not have sufficient knowledge about how to develop privacy-sensitive software. Motivated by this scenario, this tutorial aims to draw attention to the need to understand privacy from the beginning of the software development lifecycle. Initially, we will present an overview of privacy, as well as several privacy principles. Later, we will show the main data protection laws (In-depth detailing of the General Data Protection Regulation - GDPR). Then, we will discuss how to read and evaluate privacy policies. Finally, we will present an approach for specifying privacy requirements in ASD called Privacy Criteria Method (PCM). At the end of the tutorial, participants will be able to have a critical and technical view of privacy when performing the requirements specification activity. © 2021 IEEE.
Place, publisher, year, edition, pages
IEEE Computer Society , 2021. p. 512-513
Series
International Requirements Engineering Conference, ISSN 2332-6441
Keywords [en]
Data privacy, Life cycle, Specifications, Agile software development, Data protection laws, Non-functional requirements, Privacy law, Privacy principle, Privacy requirements, Requirements specifications, Software development approach, Software development life-cycle, User need, Software design
National Category
Software Engineering
Identifiers
URN: urn:nbn:se:bth-22598DOI: 10.1109/RE51729.2021.00080ISI: 000788292800073Scopus ID: 2-s2.0-85123214661ISBN: 9781665428569 (print)OAI: oai:DiVA.org:bth-22598DiVA, id: diva2:1635706
Conference
29th IEEE International Requirements Engineering Conference, RE 2021, Virtual, Notre Dame, USA, 20 September 2021 through 24 September 2021
2022-02-072022-02-072025-09-30Bibliographically approved