Towards Integrating Human Values into Software: Mapping Principles and Rights of GDPR to Values
Towards Integrating Human Values into Software: Mapping Principles and Rights of GDPR to Values
复制标题
将人类价值观融入软件：将 GDPR 的原则和权利映射到价值观
DOI：
10.1109/re.2019.00053
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
J. Whittle
中科院分区：
文献类型：
--
作者：
Harsha Perera;Waqar Hussain;D. Mougouei;R. Shams;Arif Nurwidyantoro;J. Whittle
软件已成为人类生活不可或缺的一部分。这引起了开发尊重人类价值（例如透明，公平和隐私）的软件的需求。损害人类价值观（例如隐私）的软件会影响人们的声誉，并以通常的自由和自主权在社会中发挥作用的能力。但是，将人类价值观整合到软件中是一项具有挑战性的任务，因为它的不精确和主观性质。执行法规是使软件开发考虑所需标准和价值观的一种方法。欧盟对软件的一般数据保护法规（GDPR）就是保护欧盟公民数据和个人信息的一种努力。 GDPR规定了数据保护原则和数据主题权利，主要是为了保护用户隐私。除了隐私之外，我们研究了GDPR，以确定其涵盖人类价值的程度。我们将GDPR的数据保护原则和数据主题映射到了社会科学所采用的广泛接受的人类价值结构。我们的结果表明，GDPR不仅解决了隐私，还解决了其他几种人类价值观，包括权力，安全和普遍主义。此外，公平性和透明度是GDPR规定的最有价值的原则。
Software has become an integral part of human life. This gives rise to the need of developing software that respects human values such as transparency, fairness and privacy. Software that compromises on human values (e.g. privacy) can affect people's reputation and impinges on their ability to function in society with the usual freedom and autonomy. Integrating human values into software is, however, a challenging task due to its imprecise and subjective nature. Enforcing regulations is one way to make software development considerate of the desired standards and values. The European Union's General Data Protection Regulation (GDPR) on software is one such effort to protect EU citizens' data and personal information. GDPR prescribes data protection principles and data subject rights mainly to protect user privacy. Looking beyond privacy, we studied GDPR to identify the extent to which it covers human values. We mapped GDPR's data protection principles and data subject rights to a widely accepted human values structure adopted from social sciences. Our results show that GDPR addresses not only privacy but also several other human values including power, security and universalism. Moreover, fairness and transparency stand out as the most value-conscious principles prescribed in GDPR.