From Lines of Code to Lines of Policy? Exploring Software Developers’ Perceptions of Their Privacy Policy–Related Activities

Ensuring that privacy policies accurately reflect the real-world behavior of software systems is a complex socio-technical challenge. Despite the importance of privacy policies for user trust and regulatory compliance, prior research has paid limited attention to how software developers perceive their own activities in achieving alignment between privacy policies and actual software behavior and which organizational factors they identify as leading to misalignment. This perspective is particularly important because developers’ implementation practices directly shape how software handles personal data. To address this research gap, we conducted 15 semi-structured interviews with software developers directly involved in implementing privacy-relevant functionality. Our findings identify several alignment activities performed by developers and highlight symbolic compliance as an important organizational factor contributing to gaps between documented privacy commitments and actual software behavior. Our study offers implications for researchers investigating privacy challenges in software development and provides valuable insights for organizations and developers seeking to better align privacy policies with actual software behavior.