On the Integration of Privacy-Enhancing Technologies in the Process of Software Engineering

The class of technologies known as Privacy-Enhancing Technologies (PETs) has been receiving rising attention in the academic sphere. In practice, however, the adoption of such technologies remains low. Beyond the actual implementation of a PET, it is not clear where along the process of software engineering PETs should be considered, and which activities must take place to facilitate their implementation. In this light, we aim to investigate the placement of PETs in the software engineering process, specifically from the perspective of privacy requirements engineering. To do this, we conduct a systematic literature review and interview 10 privacy experts, exploring the integration of PETs into the software engineering process, as well as identifying associated challenges along with their potential solutions. We systematize our findings in a unified process diagram that illustrates the roles and activities involved in the implementation of PETs in software systems. In addition, we map the identified solution concepts to the diagram, highlighting which stages of the software engineering process are vital in tackling the corresponding challenges and supporting the adoption of PETs.