Evaluación de prácticas de privacidad en aplicaciones móviles: mejora de la herramienta web AnnoTool-Cliip para la anotación de prácticas de privacidad en políticas textuales.

Abstract

Aiming at contributing e to the provision of techniques and tools for the compliance assessment with privacy and data protection requirements, this work presents a set of improvements to a privacy policy annotation tool, previously presented by Félix Miño. This tool already allows the definition of different types of personal data practices; however, this work presents the following improvements: (i) a module for automated upload of textual privacy policies, (ii) a module for generating annotation reports and (iii) the application has been internationalized. To this end, this work has been organized into three chapters. Chapter 1 presents the theoretical background on privacy, data protection and the Ley Orgánica de Protección de Datos Personales (LOPDP). Furthermore, the agile Scrum methodology and the development technologies used in this work are described. Chapter 2 presents the most relevant aspects of the development of the new functionalities of the tool. Firstly, in the analysis stage, the user stories and use case diagrams were specified to subsequently create the Product Backlog and, later, the Sprints Backlogs, where the main objective is to collect all the requirements established by the Product Owner. Secondly, in the design stage, the models of the proposed sprints are presented. In the implementation stage, the set of tasks and activities of the sprints that involve the completion of the project are executed. In the validation and verification stage, a testing and analysis process has been carried out to ensure that the developed tool complies with the Product Owner's specifications. Chapter 3 presents the conclusions and recommendations. Emphasis is placed on the importance and usefulness of the tool and on suggestions for future work. Finally, references and annexes of the work are presented.