Understanding issues related to personal data and data protection in open source projects on GitHub
- Anne Henning,
- Lukas Schulte,
- Steffen Herbold,
- ,
- Peter Mayer
- Karlsruher Institut für Technologie,
- University of Passau,
- ,
- University of Southern Denmark
Research Output:
Conference Article in Proceeding or Book/Report chapter
Article in proceedings
Peer-reviewOpen access
Publication Information
Output type
Research Output:
Conference Article in Proceeding or Book/Report chapter
Article in proceedings
Peer-reviewOriginal language
EnglishPublication milestones
- Published - 2023
Publication status
Published - 2023
Host publication title
Registered Report with Continuity Acceptance (CA) for submission to Empirical Software Engineering granted by RR-Committee of the MSR'23Abstract
Context: Data protection regulations such as the GDPR and the
CCPA affect how software may handle the personal data of its
users and how consent for handling of such data may be given.
Prior literature focused on how this works in operation, but lacks a
perspective of the impact on the software development process.
Objective: Within our work, we will address this gap and explore
how software development itself is impacted. We want to understand which data protection-related issues are reported, who reports
them, and how developers react to such issues.
Method: We will conduct an exploratory study based on issues that
are reported with respect to data protection in open source software
on GitHub. We will determine the roles of the actors involved, the
status of such issues, and we use inductive coding to understand
the data protection issues. We qualitatively analyze the issues as
part of the inductive coding and further explore the reasoning
for resolutions. We quantitatively analyze the relation between
the roles, resolutions, and data protection issues to understand
correlations.
CCPA affect how software may handle the personal data of its
users and how consent for handling of such data may be given.
Prior literature focused on how this works in operation, but lacks a
perspective of the impact on the software development process.
Objective: Within our work, we will address this gap and explore
how software development itself is impacted. We want to understand which data protection-related issues are reported, who reports
them, and how developers react to such issues.
Method: We will conduct an exploratory study based on issues that
are reported with respect to data protection in open source software
on GitHub. We will determine the roles of the actors involved, the
status of such issues, and we use inductive coding to understand
the data protection issues. We qualitatively analyze the issues as
part of the inductive coding and further explore the reasoning
for resolutions. We quantitatively analyze the relation between
the roles, resolutions, and data protection issues to understand
correlations.
Access to documents
License:Unspecified
Final published version
Related Event
Title
International Conference on Mining Software Repositories
Event type
ConferenceDegree of recognition
International eventDate
15/05/2023 - 16/05/2023Location
Melbourne Convention Exhibition Centre( MCEC) MelbourneAustralia
