دورية أكاديمية

Disagreeable Privacy Policies: Mismatches between Meaning and Users’ Understanding

التفاصيل البيبلوغرافية
العنوان: Disagreeable Privacy Policies: Mismatches between Meaning and Users’ Understanding
المؤلفون: Reidenberg, Joel R., Breaux, Travis, Cranor, Lorrie F., French, Brian M., Grannis, Amanda, Graves, James T., Liu, Fei, McDonald, Aleecia, Norton, Thomas B., Ramanath, Rohan, Russell, N. Cameron, Sadeh, Norman, Schaub, Florian
المصدر: Faculty Scholarship
بيانات النشر: The Fordham Law Archive of Scholarship and History
سنة النشر: 2015
مصطلحات موضوعية: Privacy Policies, Natural Language Processing, Automated Processing, Notice and Choice, privacy, Internet Law, Law, Privacy Law, droit, info
الوصف: Privacy policies are verbose, difficult to understand, take too long to read, and may be the least-read items on most websites even as users express growing concerns about information collection practices. For all their faults, though, privacy policies remain the single most important source of information for users to attempt to learn how companies collect, use, and share data. Likewise, these policies form the basis for the self-regulatory notice and choice framework that is designed and promoted as a replacement for regulation. The underlying value and legitimacy of notice and choice depends, however, on the ability of users to understand privacy policies. This paper investigates the differences in interpretation among expert, knowledgeable, and typical users and explores whether those groups can understand the practices described in privacy policies at a level sufficient to support rational decision-making. The paper seeks to fill an important gap in the understanding of privacy policies through primary research on user interpretation and to inform the development of technologies combining natural language processing, machine learning and crowdsourcing for policy interpretation and summarization. For this research, we recruited a group of law and public policy graduate students at Fordham University, Carnegie Mellon University, and the University of Pittsburgh (“knowledgeable users”) and presented these law and policy researchers with a set of privacy policies from companies in the e-commerce and news & entertainment industries. We asked them nine basic questions about the policies’ statements regarding data collection, data use, and retention. We then presented the same set of policies to a group of privacy experts and to a group of non-expert users. The findings show areas of common understanding across all groups for certain data collection and deletion practices, but also demonstrate very important discrepancies in the interpretation of privacy policy language, particularly with respect to data ...
نوع الوثيقة: text
اللغة: unknown
العلاقة: https://ir.lawnet.fordham.edu/faculty_scholarship/619Test
الإتاحة: https://ir.lawnet.fordham.edu/faculty_scholarship/619Test
حقوق: undefined
رقم الانضمام: edsbas.644D7F9
قاعدة البيانات: BASE