arXiv cs.CY· Oshrat Ayalon, Eran Toch, Irit Hadar, Michael Birnhack·· 12 小时前AI 评分20
从监管到工程：组织隐私氛围的中介作用
From Regulation to Engineering: Organizational Privacy Climate as Mediator
AI 导读
一项针对 156 名美国信息系统开发者的在线调查发现，组织隐私氛围中介了开发者对 GDPR 重要性的感知与其隐私态度之间的关系，而隐私态度又与隐私工程实践相关。研究用结构方程模型揭示出"监管—氛围—态度—实践"的中介链条，补充了监管对实践的直接效应，并讨论了对下一代隐私与 AI 监管的启示。
正文 · 原文
Abstract:Data protection legislation aims to protect privacy rights by regulating how information systems store and process personal information. While such legislation defines legal obligations, translating regulatory requirements into engineering practice is far from straightforward. As new frameworks such as the EU AI Act emerge, understanding these mechanisms becomes increasingly relevant. To investigate them, we conducted an online survey of 156 U.S. information system developers, examining the role of organizational privacy climate in the association between developers' perceptions of the GDPR and their privacy engineering practices. Using structural equation modeling, we found that organizational privacy climate mediates the relation between developers' perceived GDPR importance and their privacy attitudes, which in turn are associated with their privacy engineering practices. The mediation chain - regulation, climate, attitudes, practices - complements the direct effect of regulation on practice, revealing the organizational and attitudinal pathway through which regulatory intent reaches engineering behavior. We discuss implications for the next generation of privacy and AI regulation.
| Subjects: | Computers and Society (cs.CY); Human-Computer Interaction (cs.HC); Software Engineering (cs.SE) |
| Cite as: | arXiv:2610.32576 [cs.CY] |
| (or arXiv:2610.32576v1 [cs.CY] for this version) | |
| https://doi.org/10.48550/arXiv.2610.32576 arXiv-issued DOI via DataCite (pending registration) |
Submission history
From: Oshrat Ayalon [view email]
[v1]
Fri, 23 Oct 2026 13:03:49 UTC (415 KB)
来源：arXiv cs.CY · arxiv.org