DjangoCon Europe 2024 | How we can build web applications that respect the user's privacy

Learn how to build privacy-respecting web applications by considering user concerns, metadata, anonymization, and data governance principles, and discover the regulatory requirements of the Digital Market Act and GDPR.

Key takeaways
  • Privacy is a hot topic in web application development, and it’s essential to consider users’ concerns about their data.
  • Metadata, such as search history, location history, and other data that can be inferred from user interactions, is a critical aspect of user data to be considered.
  • There are two types of anonymization: k-anonymity and differential privacy.
  • The Digital Market Act (DMA) is a regulation that applies to big applications and restricts the sharing of user data between different parts of the company.
  • As a developer, it’s essential to consider the purpose of collecting user data and to obtain explicit consent from users.
  • Data governance is crucial, involving knowing what data is collected, where it’s stored, and for how long it’s kept.
  • The principle of “wear two hats” - considering both the developer and user perspectives - is essential when handling user data.
  • Regulations, such as GDPR and DMA, are designed to protect users’ privacy and require developers to consider the implications of their actions.
  • Children can be a valuable source of insight into users’ concerns about privacy, as they may be more forthcoming about their thoughts and feelings than adults.