Towards a privacy debt. Issue 6 (8th September 2021)

• Record Type: Journal Article
• Authors: Larrucea, Xabier; Santamaría, Izaskun; Graña Romay, Manuel
• Other Names: Murat YILMAZ guestEditor.
• Is Part Of: IET software. Volume 15:Issue 6(2021)
• Page Start: 453
• Page End: 463
• Publication Date: 2021-09-08
• Subjects: privacy -- Privacy Debt -- security -- Technical Debt; software engineering -- data privacy -- security of data; Computer software -- Periodicals; Software engineering -- Periodicals; 005.1
• DOI: 10.1049/sfw2.12044
• Languages: English
• ISSNs: 1751-8806

Abstract

Abstract: This study argues the difference between security and privacy and outlines the concept of Privacy Debt as a new Technical Debt. Privacy is gaining momentum in any software system due to mandatory compliance with respect to laws and regulations. There are several types of technical debts within the umbrella of software engineering, and most of them arise during different phases of software development. Several research studies have been focussed on highlighting different types of technical debts. However, authors introduce Privacy Debt as a particular technical debt focussed on privacy management and linked to a perturbative method. Privacy must be considered not only as technical debt requirements but also at design and deployment phases, among others. In addition, this method is illustrated with a use case.