Researchers at CSMR, CMU, and RAND outline design principles to facilitate the development of privacy notices and controls tailored to the requirements, opportunities, and limitations of specific systems.
Florian Schaub, University of MichiganRebecca Balebako, RAND CorporationLorrie Faith Cranor, Carnegie Mellon UniversityAbstract – Privacy notice and choice are essential aspects of privacy and data protection regulation worldwide. Yet, today’s privacy notices and controls are surprisingly ineffective at informing users or allowing them to express choice. We analyze why existing privacy notices fail to inform users and tend to leave them helpless, and discuss principles for designing more effective privacy notices and controls.Index Terms – Privacy, Public Policy Issues, Human Factors, Human-Computer Interaction
IEEE Internet Computing ( Early Access ) June, 2017 – https://doi.org/10.1109/MIC.2017.265102930 .