GitHub开源项目中与个人数据和数据保护相关问题的谁、什么和为什么
The whos, whats, and whys of issues related to personal data and data protection in open-source projects on GitHub
AI总结：
本研究通过归纳编码分析GitHub开源项目的652个问题，探索数据保护法规对软件开发过程的影响，发现GDPR生效显著增加了隐私讨论，且多数隐私增强请求得以顺利解决。
摘要：
欧盟的通用数据保护条例（GDPR）和美国的加州消费者隐私法案（CCPA）等数据保护法规，影响着软件处理用户个人数据的方式。现有文献主要关注运行中的软件如何讨论数据保护法规，或者软件开发过程之外的各种渠道如何讨论这一主题。然而，缺失的是此类法规对软件开发过程影响的视角。在我们的工作中，我们填补了这一空白，探索软件开发过程中的讨论如何受法规影响，谁报告和讨论与个人数据和数据保护相关的问题，以及开发人员如何对这些问题做出反应。为此，我们使用归纳编码分析了来自开源GitHub项目的652个问题，并使用这些编码定量分析了角色、解决方案和数据保护问题之间的关系，以理解相关性并预测问题的解决方案。最值得注意的是，我们观察到GDPR生效时报告量显著增加。最常见的问题类型是隐私增强的功能请求，主要由频繁报告者和频繁提交者报告和讨论。但特别是关于隐私增强的问题，也经常由一次性报告者报告。大多数请求在没有反对票的情况下得到解决。总而言之，我们的研究结果表明，数据保护法规有效地引发了软件开发社区内关于隐私的讨论。
英文摘要：
Data protection regulations such as the General Data Protection Regulation (GDPR) in the European Union and the California Consumer Privacy Act (CCPA) in the US affect how software may handle the personal data of its users. Prior literature focused on how data protection regulations are discussed for software in operation, or how this topic is discussed in various channels outside of the software development process. Yet, what is missing, is a perspective on the impact of such regulations on the software development process. In our work, we address this gap, and explore how discussions during the development of software are impacted by regulations, who reports and discusses issues related to personal data and data protection, and how developers react to those issues. To that end, we used inductive coding to analyze 652 issues from Open Source GitHub projects and used the codes to quantitatively analyze the relation between the roles, resolutions, and data protection issues to understand correlations and predict resolutions of issues. Most notably we observed a significant increase in reporting when GDPR came into effect. The most common issue types were feature requests for privacy enhancement, which were mainly reported and discussed by frequent reporters and frequent committers. But especially issues regarding privacy enhancement were also frequently reported by one-time reporters. Most of the requests were solved without opposing votes. All in all, our findings indicate that data protection regulations effectively start discussions about privacy within the software development community.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
