分析GitHub仓库中关于欧盟和美国隐私立法合规性的开发者讨论
Analyzing developer discussions on EU and US privacy legislation compliance in GitHub repositories
AI总结：
借助GitHub仓库中开发者问题数据，通过挖掘分析32820个问题（部分自动、部分手动），探究开源软件开发者为遵守隐私立法所讨论的问题，构建分类法助从业者、教育界和研究界应对隐私合规。
摘要：
背景：隐私立法影响软件系统开发方式。目标：利用GitHub仓库中开发者问题数据，收集开源软件开发者为遵守隐私立法所讨论问题的实证证据。方法：挖掘分析32820个问题。结果：设计24个讨论类别并分六组。结论：分类法助从业者等应对隐私合规。
英文摘要：
Context: Privacy legislation has impacted the way software systems are developed, prompting practitioners to update their implementations. Specifically, the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) have forced the community to focus on users' data privacy.\\ Objectives: Relying on the vast amount of data on developer issues available in GitHub repositories, our aim is to gather empirical evidence on the issues developers of Open Source Software discuss to comply with privacy legislation.\\ Method: We examined such discussions by mining and analyzing 32,820 issues from GitHub repositories. We partially analyzed the dataset automatically to identify law user rights and principles indicated, and manually analyzed a sample of 1,186 issues based on the type of concern addressed.\\ Results: We devised 24 discussion categories placed in six clusters: user rights and consent, compliance implementation, documentation, data storing/sharing, general compliance, and contextual adaptability. Developers mainly focus on specific user rights from the legislation (right to erasure, right to opt-out, right to access), addressing other rights less frequently, while most discussions concern user consent, user rights functionality, bugs and cookie management.\\ Conclusion: The created taxonomy can help practitioners understand which issues are discussed for law compliance, so that they ensure they address them first in their systems. In addition, the educational community can reshape curricula to better educate future engineers on the privacy law concerns raised, and the research community can identify gaps and areas for improvement to support and accelerate data privacy law compliance.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
