Governance for Big Data - January 2021

Submitted by Serge Egelman on Wed, 02/10/2021 - 7:22pm

PI(s), Co-PI(s), Researchers:

HARD PROBLEM(S) ADDRESSED
Human Behavior, Policy-Governed Secure Collaboration

PUBLICATIONS

Tahaei M., A. Frik, K. Vaniea. 2021. "Privacy Champions in Software Teams: Understanding Their Motivations, Strategies, and Challenges". In Proceedings of the 2021 CHI Conference on Human Factors in computing Systems. ACM. (To appear.)

KEY HIGHLIGHTS

Software development teams are responsible for making and implementing software design decisions that directly impact end-user privacy, a challenging task to do well. Privacy Champions within organizations--people who strongly care about advocating for privacy--play a useful role in supporting privacy-respecting development cultures. To understand their motivations, challenges, and strategies for protecting end-user privacy, we conducted 12 interviews with Privacy Champions in software development teams. We find that common barriers to implementing privacy in software design include: negative privacy culture, internal prioritisation tensions, limited tool support, unclear evaluation metrics, and technical complexity. To promote privacy, Privacy Champions regularly use informal discussions, management support, communication among stakeholders, and documentation and guidelines. They perceive code reviews and practical training as more instructive than general privacy awareness and on-boarding training. Our study is a first step towards understanding how Privacy Champions work to improve their organisation's privacy approaches and improve the privacy of end-user products.

Cyber-Physical Systems Virtual Organization