Toward an Android Static Analysis Approach for Data Protection

Android applications collecting data from users must protect it according to the current legal frameworks. Such data protection has become even more important since the European Union rolled out the General Data Protection Regulation (GDPR). Since app developers are not legal experts, they find it difficult to write privacy-aware source code. Moreover, they have limited tool support to reason about data protection throughout their app development process.
This paper motivates the need for a static analysis approach to diagnose and …

analysis android app app developers applications aware code collecting cs.cr cs.se current data data protection data protection regulation developers european union experts find frameworks gdpr general general data protection regulation important legal privacy protect protection regulation source code static analysis