Title:	Perceptions of ICT practitioners regarding software privacy
Authors:	Canedo, Edna Dias Calazans, Angélica Toffano Seidel Masson, Eloisa Toffano Seidel Costa, Pedro Henrique Teixeira Lima, Fernanda
metadata.dc.identifier.orcid:	https://orcid.org/0000-0002-2159-339X https://orcid.org/0000-0002-2783-4473 https://orcid.org/0000-0002-0409-058X https://orcid.org/0000-0002-8385-8314 https://orcid.org/0000-0002-5388-0238
Assunto::	Proteção de dados Dados pessoais - legislação Direito à privacidade Analistas de sistemas Software - desenvolvimento
Issue Date:	2020
Publisher:	MDPI
Citation:	CANEDO, Edna Dias et al. Perceptions of ICT practitioners regarding software privacy. Entropy, v. 22, n. 4, 429, 2020. DOI: https://doi.org/10.3390/e22040429. Disponível em: https://www.mdpi.com/1099-4300/22/4/429. Acesso em: 08 maio 2020.
Abstract:	During software development activities, it is important for Information and Communication Technology (ICT) practitioners to know and understand practices and guidelines regarding information privacy, as software requirements must comply with data privacy laws and members of development teams should know current legislation related to the protection of personal data. In order to gain a better understanding on how industry ICT practitioners perceive the practical relevance of software privacy and privacy requirements and how these professionals are implementing data privacy concepts, we conducted a survey with ICT practitioners from software development organizations to get an overview of how these professionals are implementing data privacy concepts during software design. We performed a systematic literature review to identify related works with software privacy and privacy requirements and what methodologies and techniques are used to specify them. In addition, we conducted a survey with ICT practitioners from different organizations. Findings revealed that ICT practitioners lack a comprehensive knowledge of software privacy and privacy requirements and the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, LGPD, in Portuguese), nor they are able to work with the laws and guidelines governing data privacy. Organizations are demanded to define an approach to contextualize ICT practitioners with the importance of knowledge of software privacy and privacy requirements, as well as to address them during software development, since LGPD must change the way teams work, as a number of features and controls regarding consent, documentation, and privacy accountability will be required.
Licença::	© 2020 by the authors. Licensee MDPI, Basel, Switzerland. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution (CC BY) license (http://creativecommons.org/licenses/by/4.0/).
DOI:	https://doi.org/10.3390/e22040429
Appears in Collections:	Artigos publicados em periódicos e afins

Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.