Adapting the SQUARE Process for Privacy Requirements Engineering
July 2010 • Technical Note
In this 2010 report, the authors explore how the SQUARE process can be adapted for privacy requirements engineering in software development.
Software Engineering Institute
CMU/SEI Report Number
As software systems become more distributed and complex, maintaining privacy of data and ensuring data integrity remain challenges for software practitioners. Developing such systems not only poses technical challenges but also demands compliance with privacy laws. Engineering precise privacy requirements is an important step in building these software systems. This technical note explores the use of a disciplined approach to identifying privacy requirements, primarily how the Security Quality Requirements Engineering (SQUARE) process, which was developed for security requirements engineering, can be adapted for privacy requirements engineering in software development.