Assessing software privacy using the privacy flow-graph
Feiyang Tang, Bjarte M. Østvold
Abstract
We increasingly rely on digital services and the conveniences they provide. Processing of personal data is integral to such services and thus privacy and data protection are a growing concern, and governments have responded with regulations such as the EU's GDPR. Following this, organisations that make software have legal obligations to document the privacy and data protection of their software. This work must involve both software developers that understand the code and the organisation's data protection officer or legal department that understands privacy and the requirements of a Data Protection and Impact Assessment (DPIA).
Topics & Concepts
Computer sciencePrivacy by DesignPrivacy softwarePrivacy policyInformation privacySoftwareComputer securityData Protection Act 1998Cloud computingService (business)Internet privacyWorld Wide WebBusinessProgramming languageMarketingOperating systemAdvanced Malware Detection TechniquesPrivacy, Security, and Data ProtectionDigital and Cyber Forensics