A holistic list of privacy-preserving measures for system development life cycles

Hills, Alida and Da Veiga, Adele and Loock, Marianne and Renaud, Karen; (2024) A holistic list of privacy-preserving measures for system development life cycles. In: Advanced Research in Technologies, Information, Innovation and Sustainability. Communications in Computer and Information Science . Springer, Cham. (In Press)

[thumbnail of Hills-etal-ARTIIS-2024-A-holistic-list-of-privacy-preserving-measures]
Preview
 Text. Filename: Hills-etal-ARTIIS-2024-A-holistic-list-of-privacy-preserving-measures.pdf
Preprint
License: Strathprints license 1.0
Download (305kB)| Preview

Abstract

Personal information, as a key resource for companies, must be kept confidential as per the relevant data protection regulations. The same data protection regulations provide employees and customers the right to control their personal information. IT software is used to create, edit, store, and delete this personal information. However, cyber-attacks, security concerns, and data breaches relating to the personal information of customers and employees occur at an alarming rate, violating the confidentiality and privacy of said customers and employees. Privacy by Design (PbD) should be embedded into traditional Information Technology (IT) software development life cycles(SDLCs) to minimise data loss or breaches of personal information to aid in ensuring end-to-end privacy and confidentiality of personal data. Moreover, IT software must comply with data protection regulations to minimise data loss or breaches of personal information. A scoping literature review was conducted to gain insight into PbD and data protection regulations principles that are embedded into IT SDLC phases. Relevant articles were analysed using a qualitative approach. Privacypreserving measures are identified that can be used to meet the PbD and data protection regulations requirements. The contribution of this paper is a holistic list of privacypreserving measures that can be utilised to embed privacy considerations data protection regulations into the IT SDLC phases.

ORCID iDs

Hills, Alida, Da Veiga, Adele, Loock, Marianne and Renaud, Karen ORCID logoORCID: https://orcid.org/0000-0002-7187-6531;
  • Item type:Book Section
    ID code:90879
    Dates:
    Date
    Event
    15 July 2024
    Published
    15 July 2024
    Accepted
    Subjects:
    Department:Faculty of Science > Computer and Information Sciences
    Depositing user: Pure Administrator
    Date deposited:17 Oct 2024 11:08
    Last modified:16 Nov 2024 01:33
    URI:https://strathprints.strath.ac.uk/id/eprint/90879
CORE (COnnecting REpositories)