Data Privacy in Software Practice: Brazilian Developers’ Perspectives – Extended Abstract – CTDG-SI 2026

• Aryely Matos UFC
• Anderson Uchôa UFC
• Juliana Alves Pereira PUC-Rio

DOI: https://doi.org/10.5753/sbsi_estendido.2026.249067

Resumo

This extended abstract presents a study on data privacy in software development practice. Based on a survey with 88 Brazilian developers with privacy-related experience, it investigates their awareness of data privacy, perceptions of privacy strategies, and the influence of organizational factors. Our results reveal gaps between developers with direct and indirect privacy experience. While strategies such as encryption are widely adopted and perceived as highly important, others, such as disabling data collection, show that ease of use does not necessarily lead to adoption. We also found that the absence of dedicated privacy teams is associated with lower prioritization and reduced investment in tools. Overall, the findings highlight the role of organizational context in shaping privacy practices and provide insights to improve privacy engineering in software development.

Referências

Canedo, E. D., Bandeira, I. N., Calazans, A. T. S., Costa, P. H. T., Cançado, E. C. R., and Bonifácio, R. (2023). Privacy requirements elicitation: a systematic literature review and perception analysis of IT practitioners. Requir. Eng., 28(2):177–194.

Corbin, J. and Strauss, A. (2008). Basics of qualitative research: Techniques and procedures for developing grounded theory. Thousand Oaks, 3:1–400.

Grissom, R. J. and Kim, J. J. (2005). Effect sizes for research: A broad practical approach. Lawrence Erlbaum Associates Publishers.

Iwaya, L. H., Babar, M. A., and Rashid, A. (2023). Privacy engineering in the wild: Understanding the practitioners’ mindset, organizational aspects, and current practices. IEEE Trans. Softw. Eng., 49(9):4324–4348.

Kempe, E. and Massey, A. (2021). Regulatory and security standard compliance throughout the software development lifecycle. In 54th HICSS, pages 1–10. ScholarSpace.

Matos, A., Patrício, M., Nicolau, M. I., Canedo, E. D., Pereira, J. A., and Uchôa, A. (2025). Data privacy in software practice: Brazilian developers’ perspectives. J. Internet Serv. Appl., 16(1):299–319.

Schrader, P. G. and Lawless, K. A. (2004). The knowledge, attitudes, & behaviors approach how to evaluate performance and learning in complex environments. Performance Improvement, 43(9):8–15.

Tahaei, M., Frik, A., and Vaniea, K. (2021). Privacy champions in software teams: Understanding their motivations, strategies, and challenges. In Proc. CHI Conf. Hum. Factors Comput. Syst., pages 693:1–693:15.

Whitley, E. and Ball, J. (2002). Statistics review 6: Nonparametric methods. Critical care, 6:1–5.