”Sorry for bugging you so much.“ Exploring Developers’ Behavior Towards Privacy-Compliant Implementation
Stefan Albert Horstmann, Sandy Hong, David Klein, Raphael Serafini, Martin Degeling, Martin Johns
IEEE Symposium on Security and Privacy 2025 · Day 1 · Privacy
In an era defined by stringent data protection regulations such as the General Data Protection Regulation (GDPR) in the European Union and the California Consumer Privacy Act (CCPA), companies face significant legal and financial repercussions for mishandling user data. While legal departments set the compliance frameworks, the ultimate responsibility for implementing these requirements often falls squarely on the shoulders of software developers. This talk, presented by Stefan Albert Horstmann and his co-authors at IEEE S&P, delves into a critical yet underexplored area: how software developers actually navigate and implement privacy-compliant solutions in their daily work.