Understanding issues related to personal data and data protection in open source projects on GitHub

Anne Henning; Lukas Schulte; Steffen Herbold; Oksana Kulyk; Peter Mayer

doi:10.48550/arXiv.2304.06367

Understanding issues related to personal data and data protection in open source projects on GitHub

Anne Henning
, Lukas Schulte
, Steffen Herbold
, Oksana Kulyk
, Peter Mayer

Center for Information Security and Trust

Karlsruher Institut für Technologie
University of Passau
University of Southern Denmark

Research output: Conference Article in Proceeding or Book/Report chapter › Article in proceedings › Research › peer-review

Abstract

Context: Data protection regulations such as the GDPR and the
CCPA affect how software may handle the personal data of its
users and how consent for handling of such data may be given.
Prior literature focused on how this works in operation, but lacks a
perspective of the impact on the software development process.
Objective: Within our work, we will address this gap and explore
how software development itself is impacted. We want to understand which data protection-related issues are reported, who reports
them, and how developers react to such issues.
Method: We will conduct an exploratory study based on issues that
are reported with respect to data protection in open source software
on GitHub. We will determine the roles of the actors involved, the
status of such issues, and we use inductive coding to understand
the data protection issues. We qualitatively analyze the issues as
part of the inductive coding and further explore the reasoning
for resolutions. We quantitatively analyze the relation between
the roles, resolutions, and data protection issues to understand
correlations.

Original language	English
Title of host publication	Registered Report with Continuity Acceptance (CA) for submission to Empirical Software Engineering granted by RR-Committee of the MSR'23
Number of pages	8
Publication date	2023
DOIs	https://doi.org/10.48550/arXiv.2304.06367
Publication status	Published - 2023
Event	International Conference on Mining Software Repositories - Melbourne Convention Exhibition Centre( MCEC) , Melbourne, Australia Duration: 15 May 2023 → 16 May 2023 Conference number: 20 https://conf.researchr.org/home/msr-2023

Conference

Conference	International Conference on Mining Software Repositories
Number	20
Location	Melbourne Convention Exhibition Centre( MCEC)
Country/Territory	Australia
City	Melbourne
Period	15/05/2023 → 16/05/2023
Internet address	https://conf.researchr.org/home/msr-2023

Keywords

Data Protection
Software Development
GDPR
CCPA
Open Source Software

Access to Document

10.48550/arXiv.2304.06367Licence: Unspecified

https://arxiv.org/abs/2304.06367
https://arxiv.org/pdf/2304.06367.pdfLicence: Unspecified

Cite this

@inproceedings{93c8a24ae3bf4041b91ba667daf2be25,

title = "Understanding issues related to personal data and data protection in open source projects on GitHub",

abstract = "Context: Data protection regulations such as the GDPR and the CCPA affect how software may handle the personal data of its users and how consent for handling of such data may be given. Prior literature focused on how this works in operation, but lacks a perspective of the impact on the software development process. Objective: Within our work, we will address this gap and explore how software development itself is impacted. We want to understand which data protection-related issues are reported, who reports them, and how developers react to such issues. Method: We will conduct an exploratory study based on issues that are reported with respect to data protection in open source software on GitHub. We will determine the roles of the actors involved, the status of such issues, and we use inductive coding to understand the data protection issues. We qualitatively analyze the issues as part of the inductive coding and further explore the reasoning for resolutions. We quantitatively analyze the relation between the roles, resolutions, and data protection issues to understand correlations. ",

keywords = "Data Protection, Software Development, GDPR, CCPA, Open Source Software, Data Protection, Software Development, GDPR, CCPA, Open Source Software",

author = "Anne Henning and Lukas Schulte and Steffen Herbold and Oksana Kulyk and Peter Mayer",

year = "2023",

doi = "10.48550/arXiv.2304.06367",

language = "English",

booktitle = "Registered Report with Continuity Acceptance (CA) for submission to Empirical Software Engineering granted by RR-Committee of the MSR'23",

note = "International Conference on Mining Software Repositories , MSR ; Conference date: 15-05-2023 Through 16-05-2023",

url = "https://conf.researchr.org/home/msr-2023",

}

Henning, A, Schulte, L, Herbold, S, Kulyk, O & Mayer, P 2023, Understanding issues related to personal data and data protection in open source projects on GitHub. in Registered Report with Continuity Acceptance (CA) for submission to Empirical Software Engineering granted by RR-Committee of the MSR'23. International Conference on Mining Software Repositories , Melbourne, Victoria, Australia, 15/05/2023. https://doi.org/10.48550/arXiv.2304.06367

Understanding issues related to personal data and data protection in open source projects on GitHub. / Henning, Anne; Schulte, Lukas; Herbold, Steffen et al.
Registered Report with Continuity Acceptance (CA) for submission to Empirical Software Engineering granted by RR-Committee of the MSR'23. 2023.

Research output: Conference Article in Proceeding or Book/Report chapter › Article in proceedings › Research › peer-review

TY - GEN

T1 - Understanding issues related to personal data and data protection in open source projects on GitHub

AU - Henning, Anne

AU - Schulte, Lukas

AU - Herbold, Steffen

AU - Kulyk, Oksana

AU - Mayer, Peter

N1 - Conference code: 20

PY - 2023

Y1 - 2023

N2 - Context: Data protection regulations such as the GDPR and the CCPA affect how software may handle the personal data of its users and how consent for handling of such data may be given. Prior literature focused on how this works in operation, but lacks a perspective of the impact on the software development process. Objective: Within our work, we will address this gap and explore how software development itself is impacted. We want to understand which data protection-related issues are reported, who reports them, and how developers react to such issues. Method: We will conduct an exploratory study based on issues that are reported with respect to data protection in open source software on GitHub. We will determine the roles of the actors involved, the status of such issues, and we use inductive coding to understand the data protection issues. We qualitatively analyze the issues as part of the inductive coding and further explore the reasoning for resolutions. We quantitatively analyze the relation between the roles, resolutions, and data protection issues to understand correlations.

AB - Context: Data protection regulations such as the GDPR and the CCPA affect how software may handle the personal data of its users and how consent for handling of such data may be given. Prior literature focused on how this works in operation, but lacks a perspective of the impact on the software development process. Objective: Within our work, we will address this gap and explore how software development itself is impacted. We want to understand which data protection-related issues are reported, who reports them, and how developers react to such issues. Method: We will conduct an exploratory study based on issues that are reported with respect to data protection in open source software on GitHub. We will determine the roles of the actors involved, the status of such issues, and we use inductive coding to understand the data protection issues. We qualitatively analyze the issues as part of the inductive coding and further explore the reasoning for resolutions. We quantitatively analyze the relation between the roles, resolutions, and data protection issues to understand correlations.

KW - Data Protection

KW - Software Development

KW - GDPR

KW - CCPA

KW - Open Source Software

KW - Data Protection

KW - Software Development

KW - GDPR

KW - CCPA

KW - Open Source Software

U2 - 10.48550/arXiv.2304.06367

DO - 10.48550/arXiv.2304.06367

M3 - Article in proceedings

BT - Registered Report with Continuity Acceptance (CA) for submission to Empirical Software Engineering granted by RR-Committee of the MSR'23

T2 - International Conference on Mining Software Repositories

Y2 - 15 May 2023 through 16 May 2023

ER -

Understanding issues related to personal data and data protection in open source projects on GitHub

Abstract

Conference

Keywords

Access to Document

Fingerprint

Cite this