Evaluating the Contextual Integrity of Privacy Regulation: Parents' IoT Toy Privacy Norms Versus COPPA
Evaluating the Contextual Integrity of Privacy Regulation: Parents' IoT Toy Privacy Norms Versus COPPA
复制标题
DOI：
--
复制
发表时间：
2019-03
期刊：
影响因子：
--
通讯作者：
Noah J. Apthorpe;Sarah Varghese;N. Feamster
中科院分区：
文献类型：
--
作者：
Noah J. Apthorpe;Sarah Varghese;N. Feamster
对数据隐私的日益关注促使全球出台了新的和更新的数据保护法规。然而，目前还没有严格的方法来测试这些法规规定的做法是否真的符合受影响人群的隐私规范。在这里，我们证明了基于上下文完整性理论的调查为衡量特定监管条款与隐私规范的一致性提供了一种可量化和可扩展的方法。我们将这种方法应用于美国儿童在线隐私保护法（COPPA），调查了195名家长，并提供了第一批数据，表明COPPA的要求总体上符合家长对联网“智能”儿童玩具的隐私期望。然而，在特定的智能玩具、信息类型、父母年龄和其他条件下，数据收集的可接受性的变化强调了详细的环境因素对隐私规范的重要性，COPPA可能没有充分捕捉到这些因素。
Increased concern about data privacy has prompted new and updated data protection regulations worldwide. However, there has been no rigorous way to test whether the practices mandated by these regulations actually align with the privacy norms of affected populations. Here, we demonstrate that surveys based on the theory of contextual integrity provide a quantifiable and scalable method for measuring the conformity of specific regulatory provisions to privacy norms. We apply this method to the U.S. Children's Online Privacy Protection Act (COPPA), surveying 195 parents and providing the first data that COPPA's mandates generally align with parents' privacy expectations for Internet-connected "smart" children's toys. Nevertheless, variations in the acceptability of data collection across specific smart toys, information types, parent ages, and other conditions emphasize the importance of detailed contextual factors to privacy norms, which may not be adequately captured by COPPA.