Beyond Notice and Choice: Privacy, Norms, and Consent
Beyond Notice and Choice: Privacy, Norms, and Consent
复制标题
超越通知和选择：隐私、规范和同意
DOI：
--
复制
发表时间：
2013
期刊：
影响因子：
--
通讯作者：
Richard Warner
中科院分区：
文献类型：
--
作者：
R. Sloan;Richard Warner
信息隐私是指您能够自行决定他人何时以及如何收集和使用您的信息。充分的信息隐私需要有足够广泛的能力对拟议的使用给予或拒绝自由和知情的同意。通知和选择（有时也称为“通知和同意”）是当前在线同意的范例。该通知是一个条款的介绍，通常在隐私政策或使用条款协议。选择是表示接受条款的动作，通常是点击“我同意”按钮，或简单地使用网站。联邦贸易委员会最近的报告明确支持通知和选择方法（并为其实施提供指导方针）。当通知包含有关数据收集和使用的信息时，通知和选择的论点取决于两个主张。第一个：充分实施这一模式将确保网站访问者能够对数据收集和使用做法表示自由和知情的同意。第二个：所有个人决定的综合效果是在隐私与收集和使用消费者数据的好处之间的可接受的整体权衡。对于这两种说法都有（我们认为）决定性的批评。那么，为什么政策制定者和隐私倡导者继续支持通知和选择？最有可能的是，他们认为没有必要寻求替代方案。我们认为对《注意与选择》的批判是结论性的，但我们的评价远未得到广泛认同--这是可以理解的。对注意和选择的批评分散在几篇文章和几本书中。没有人统一他们，回答明显的反驳。我们这样做。然而，将批评说得明明白白并不足以确保政策制定者转向可行的替代方案。这些批评完全是负面的;它们没有提供任何替代注意和选择的选择。我们提供了一个替代方案：信息规范。当适当的信息规范管理在线数据收集和使用时，它们既确保访问者对这些做法给予自由和知情的同意，又在保护隐私和处理信息的好处之间产生可接受的总体权衡。一个根本的困难是缺乏规范。信息处理技术的快速发展推动了新的商业模式，快速发展的速度超过了规范的缓慢演变。注意和选择不能被强行用于弥补这一缺陷。有必要制定新的规范。
Informational privacy is the ability to determine for yourself when and how others may collect and use your information. Adequate informational privacy requires a sufficiently broad ability to give or withhold free and informed consent to proposed uses.Notice and Choice (sometimes also called “notice and consent”) is the current paradigm for consent online. The Notice is a presentation of terms, typically in a privacy policy or terms of use agreement. The Choice is an action signifying acceptance of the terms, typically clicking on an “I agree” button, or simply using the website. Recent reports by the Federal Trade Commission explicitly endorse the Notice and Choice approach (and provide guidelines for its implementation). When the Notice contains information about data collection and use, the argument for Notice and Choice rests on two claims. First: a fully adequate implementation of the paradigm would ensure that website visitors can give free and informed consent to data collection and use practices. Second: the combined effect of all the individual decisions is an acceptable overall tradeoff between privacy and the benefits of collecting and using consumers’ data. There are (we contend) decisive critiques of both claims. So why do policy makers and privacy advocates continue to endorse Notice and Choice?Most likely, they see no need to seek an alternative. We find the critique of Notice and Choice conclusive, but our assessment is far from widely shared — and understandably so. Criticisms of Notice and Choice are scattered over several articles and books. No one has unified them and answered the obvious counterarguments. We do so. Making the critique plain, however, is not enough to ensure that policy makers turn to a viable alternative. The critiques are entirely negative; they do not offer any alternative to Notice and Choice. We offer an alternative: informational norms. When appropriate informational norms govern online data collection and use, they both ensure that visitors give free and informed consent to those practices, and yield an acceptable overall tradeoff between protecting privacy and the benefits of processing information. A fundamental difficulty is the lack of norms. Rapid advances in information processing technology have fueled new business models, and the rapid development has outpaced the slow evolution of norms. Notice and Choice cannot be pressed into service to remedy this lack. It is necessary to develop new norms.