- Conference Article
1
- 10.1109/iscc65549.2025.11326355
PrivGuide: A Planning Tool for Proactive Privacy Integration in the DevPrivOps Lifecycle
- Jul 02, 2025
- João Felisberto + 4 more +4
Privacy concerns are rapidly growing, demanding tighter integration within the Agile software development lifecycle. Existing approaches rely on audits that are not integrated into the DevOps lifecycle, which greatly hinders both the analysis of privacy risks and the correction of privacy flaws. Even integrated tools are primarily reactive, treating privacy as an afterthought rather than a design principle. The currently used privacy engineering methodologies tend to be too general and have lackluster tooling to be enforced. Furthermore, privacy quantification is very domain-dependent, which makes it hard to automate without the help of an expert. DevPrivOps, a proposed extension to DevOps, focused on continuous privacy verification and user transparency, suffers from a lack of concrete tools. This paper proposes a novel tool for the DevPrivOps lifecycle that bridges the gap between privacy engineering methodology and the Agile planning phase, promoting the adoption of privacy by design strategies. This tool serves as a foundation for building and integrating further DevPrivOps tools, fostering a proactive approach to privacy within Agile development. We present the interface of this tool and its role in the DevPrivOps framework
Read more