A Design Space for Effective Privacy Notices
A Design Space for Effective Privacy Notices
复制标题
DOI：
10.1017/9781316831960.021
复制
发表时间：
2015-07
期刊：
影响因子：
--
通讯作者：
F. Schaub;Rebecca Balebako;Adam L. Durity;L. Cranor
中科院分区：
文献类型：
--
作者：
F. Schaub;Rebecca Balebako;Adam L. Durity;L. Cranor
通知用户有关系统的数据实践，应该使用户能够做出明智的隐私决策。然而，当前的通知和选择机制（例如隐私政策）通常是无效的，因为它们既无用又有用，因此用户被忽略了。在物联网中连接的移动设备，可穿戴设备和智能家居设备上的限制界面加剧了问题。许多研究研究了隐私声明的可用性问题，并且存在许多有关更可用的隐私声明的建议。但是，对于设计人员和开发人员的设计方面，几乎没有指导，这些方面可能会影响隐私通知的有效性。在本文中，我们为补救这个问题做出了多种贡献。我们调查有关隐私通知的现有文献，并确定隐私通知设计的挑战，需求和最佳实践。此外，我们通过识别相关维度来绘制隐私通知的设计空间。这提供了通知方法的分类学和一致的术语，以促进特定系统中可用的通知选项的理解和推理。我们对知识的系统化和开发的设计空间可以帮助设计师，开发人员和研究人员确定通知和选择要求，并为其系统制定全面的通知概念，以满足不同受众的需求，并考虑系统的限制和提供通知的机会。
Notifying users about a system's data practices is supposed to enable users to make informed privacy decisions. Yet, current notice and choice mechanisms, such as privacy policies, are often ineffective because they are neither usable nor useful, and are therefore ignored by users. Constrained interfaces on mobile devices, wearables, and smart home devices connected in an Internet of Things exacerbate the issue. Much research has studied usability issues of privacy notices and many proposals for more usable privacy notices exist. Yet, there is little guidance for designers and developers on the design aspects that can impact the effectiveness of privacy notices. In this paper, we make multiple contributions to remedy this issue. We survey the existing literature on privacy notices and identify challenges, requirements, and best practices for privacy notice design. Further, we map out the design space for privacy notices by identifying relevant dimensions. This provides a taxonomy and consistent terminology of notice approaches to foster understanding and reasoning about notice options available in the context of specific systems. Our systemization of knowledge and the developed design space can help designers, developers, and researchers identify notice and choice requirements and develop a comprehensive notice concept for their system that addresses the needs of different audiences and considers the system's limitations and opportunities for providing notice.