Understanding the Privacy Goal Intervenability

• Published in: Trust, Privacy and Security in Digital Business Vol. 9830; pp. 79 - 94
• Main Authors: Meis, Rene, Heisel, Maritta
• Format: Book Chapter
• Language: English
• Published: Switzerland Springer International Publishing AG 2016; Springer International Publishing
• Series: Lecture Notes in Computer Science
• Subjects: Computer security; Data Subject; Legal Person; Personal Data; Requirement Engineer; Systematic Literature Review
• ISBN: 3319443402; 9783319443409
• ISSN: 0302-9743; 1611-3349
• DOI: 10.1007/978-3-319-44341-6_6

Privacy is gaining more and more attention in society and hence, gains more importance as a software quality that has to be considered during software development. A privacy goal that has not yet been deeply studied is the empowerment of end-users to have control over how their personal data is processed by information systems. This privacy goal is called intervenability. Several surveys have shown that one of end-users’ main privacy concerns is the lack of intervenability options in information systems. In this paper, we refine the privacy goal intervenability into a software requirements taxonomy and relate it to a taxonomy of transparency requirements because transparency can be regarded as a prerequisite for intervenability. The combined taxonomy of intervenability and transparency requirements shall guide requirements engineers to identify the intervenability requirements relevant for the system they consider. We validated the completeness of our taxonomy by comparing it to the relevant literature that we derived based on a systematic literature review.