Search papers, labs, and topics across Lattice.
This study investigates how software developers utilize online forums, specifically Reddit, to navigate complex privacy law requirements, revealing that even certified professionals frequently seek legal advice from these platforms. Through a survey of 223 users and qualitative analysis of 2,248 posts, it identifies key challenges such as data protection assessments and breach reporting, along with strategies for assessing the credibility of advice. The findings underscore the reliance on community knowledge while highlighting significant gaps in regulatory compliance support for developers.
Despite holding privacy certifications, developers turn to Reddit for legal advice, revealing a critical gap in professional support for navigating privacy law.
Software practitioners use online forums to navigate complex and often ambiguous legal privacy requirements, yet little is known about their professional backgrounds, what challenges they face, and how they use and assess the credibility of the advice received, or how they resolve ambiguities in posts. We report the findings of a survey of 223 Reddit users from regulatory-focused subreddits, complemented by a qualitative analysis of 2,248 posts and responses. Our results show that, despite holding privacy-related certifications, most participants frequently use forums to seek legal advice. Key challenges reported or identified include implementing a data protection impact assessment, reporting a data breach, and obtaining cookie consent. Reddit users often assess credibility by reviewing respondents' post history, verifying sources cited, trusting advice from recognized experts, and following up for clarity before responding. We highlight research and educational directions to bridge gaps in support needed for regulatory compliance guidance.
CMU ML