Abstract
Context: Data protection regulations such as the GDPR and the
CCPA affect how software may handle the personal data of its
users and how consent for handling of such data may be given.
Prior literature focused on how this works in operation, but lacks a
perspective of the impact on the software development process.
Objective: Within our work, we will address this gap and explore
how software development itself is impacted. We want to understand which data protection-related issues are reported, who reports
them, and how developers react to such issues.
Method: We will conduct an exploratory study based on issues that
are reported with respect to data protection in open source software
on GitHub. We will determine the roles of the actors involved, the
status of such issues, and we use inductive coding to understand
the data protection issues. We qualitatively analyze the issues as
part of the inductive coding and further explore the reasoning
for resolutions. We quantitatively analyze the relation between
the roles, resolutions, and data protection issues to understand
correlations.
CCPA affect how software may handle the personal data of its
users and how consent for handling of such data may be given.
Prior literature focused on how this works in operation, but lacks a
perspective of the impact on the software development process.
Objective: Within our work, we will address this gap and explore
how software development itself is impacted. We want to understand which data protection-related issues are reported, who reports
them, and how developers react to such issues.
Method: We will conduct an exploratory study based on issues that
are reported with respect to data protection in open source software
on GitHub. We will determine the roles of the actors involved, the
status of such issues, and we use inductive coding to understand
the data protection issues. We qualitatively analyze the issues as
part of the inductive coding and further explore the reasoning
for resolutions. We quantitatively analyze the relation between
the roles, resolutions, and data protection issues to understand
correlations.
| Original language | English |
|---|---|
| Title of host publication | Registered Report with Continuity Acceptance (CA) for submission to Empirical Software Engineering granted by RR-Committee of the MSR'23 |
| Number of pages | 8 |
| Publication date | 2023 |
| DOIs | |
| Publication status | Published - 2023 |
| Event | 20th International Conference on Mining Software Repositories (MSR ’23). : MSR 2023 - Melbourne, Melbourne, Australia Duration: 15 May 2023 → 16 May 2023 Conference number: 20 https://conf.researchr.org/home/msr-2023 |
Conference
| Conference | 20th International Conference on Mining Software Repositories (MSR ’23). |
|---|---|
| Number | 20 |
| Location | Melbourne |
| Country/Territory | Australia |
| City | Melbourne |
| Period | 15/05/2023 → 16/05/2023 |
| Internet address |
Keywords
- Data Protection
- Software Development
- GDPR
- CCPA
- Open Source Software