Overcoming Privacy-Related Challenges for Game Developers

Authors Marissa Berk, Tamara Marantika, Daan Oldenhof, Marcel Stalenhoef, Erik Hekman, Levien Nordeman, Simone van der Hof, Linda Louis, Aletta Smits, Koen van Turnhout
Published in HCI for Cybersecurity, Privacy and Trust. HCII 2023. Lecture Notes in Computer Science
Publication date 2023
Research groups Human Experience & Media Design
Type Lecture

Summary

Design and development practitioners such as those in game development often have difficulty comprehending and adhering to the European General Data Protection Regulation (GDPR), especially when designing in a private sensitive way. Inadequate understanding of how to apply the GDPR in the game development process can lead to one of two consequences: 1. inadvertently violating the GDPR with sizeable fines as potential penalties; or 2. avoiding the use of user data entirely. In this paper, we present our work on designing and evaluating the “GDPR Pitstop tool”, a gamified questionnaire developed to empower game developers and designers to increase legal awareness of GDPR laws in a relatable and accessible manner. The GDPR Pitstop tool was developed with a user-centered approach and in close contact with stakeholders, including practitioners from game development, legal experts and communication and design experts. Three design choices worked for this target group: 1. Careful crafting of the language of the questions; 2. a flexible structure; and 3. a playful design. By combining these three elements into the GDPR Pitstop tool, GDPR awareness within the gaming industry can be improved upon and game developers and designers can be empowered to use user data in a GDPR compliant manner. Additionally, this approach can be scaled to confront other tricky issues faced by design professionals such as privacy by design.

On this publication contributed

Language English
Published in HCI for Cybersecurity, Privacy and Trust. HCII 2023. Lecture Notes in Computer Science
Year and volume 2023 vol 14045
Key words game developers, General Data Protection Regulation (GDPR), privacy by design
Digital Object Identifier 10.1007/978-3-031-35822-7_2
Page range 18-28

Human Experience and Media Design