标题： 隐私物料清单：移动应用开发中协作隐私声明生成的透明隐私信息库存 显示英文标题

标题： Privacy Bills of Materials: A Transparent Privacy Information Inventory for Collaborative Privacy Notice Generation in Mobile App Development

摘要： 隐私法规要求开发者必须提供真实且全面的隐私通知，例如隐私政策或标签，以告知用户其应用程序的隐私实践。 然而，由于缺乏对隐私要求的知识，开发者在创建准确的隐私通知时常常遇到困难，尤其是在具有复杂功能和庞大开发团队的复杂移动应用程序中。 为了解决这些挑战，我们引入了隐私材料清单（PriBOM），这是一种系统化的软件工程方法，利用不同的开发团队角色来更好地捕捉和协调移动应用的隐私信息。 PriBOM促进了以透明为中心的隐私文档和特定隐私通知的创建，实现了隐私实践的可追溯性和可跟踪性。 我们提出了一种基于静态分析和隐私通知分析技术的PriBOM预填充方法。 我们通过一项包含150名多样化参与者的人员评估展示了PriBOM的感知有用性。 我们的研究结果表明，PriBOM可以作为移动应用DevOps中提供隐私支持的重要解决方案。 显示英文摘要

摘要： Privacy regulations mandate that developers must provide authentic and comprehensive privacy notices, e.g., privacy policies or labels, to inform users of their apps' privacy practices. However, due to a lack of knowledge of privacy requirements, developers often struggle to create accurate privacy notices, especially for sophisticated mobile apps with complex features and in crowded development teams. To address these challenges, we introduce Privacy Bills of Materials (PriBOM), a systematic software engineering approach that leverages different development team roles to better capture and coordinate mobile app privacy information. PriBOM facilitates transparency-centric privacy documentation and specific privacy notice creation, enabling traceability and trackability of privacy practices. We present a pre-fill of PriBOM based on static analysis and privacy notice analysis techniques. We demonstrate the perceived usefulness of PriBOM through a human evaluation with 150 diverse participants. Our findings suggest that PriBOM could serve as a significant solution for providing privacy support in DevOps for mobile apps.