Collaborative Research: SaTC: CORE: Medium: Narrowing The Gap Between Privacy Expectations and Reality in Mobile Health

协作研究：SaTC：核心：中：缩小移动医疗中隐私期望与现实之间的差距

• 批准号: 2055773
• 负责人: Mitra Bokaei Hosseini
• 金额: $ 19.65万
• 依托单位: St Mary's University San Antonio
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2021
• 资助国家: 美国
• 起止时间: 2021-03-01 至 2023-03-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2055773&HistoricalAwards=false
• 关键词: Collaborative; Research; SaTC; CORE; Medium

Recent years have seen a dramatic rise in mobile apps for health monitoring, a trend accelerated by the COVID-19 pandemic. By collecting and utilizing massive amounts of data, mobile health apps could revolutionize how people monitor their health and how they interact with physicians. This revolution could be derailed by unexpected data uses and poor privacy protections scaring away potential users. This project systematically examines the potential disconnects between consumers’ privacy expectations when interacting with mobile health apps, privacy perspectives and behaviors of health apps’ developers, the privacy protections afforded by the law and relevant privacy policies, and the actual data handling practices of such apps. The research team is addressing identified disconnects by demonstrating new methods of communicating privacy information to developers and users. The team will attempt to better align the practices of mobile health apps with the privacy expectations of consumers by producing policy recommendations, validated user interface artifacts that improve transparency and privacy control mechanisms, practical solutions for monitoring data practices and enforcing privacy regulations, and advice for developers on considering privacy while designing software.Combining expertise in social sciences, computer security and privacy, natural language processing, and law, the investigators are comprehensively analyzing the privacy of mobile health apps. They will learn the app’s actual data practices by studying their sensitive resource usage and communication over the network. The investigators are examining how current privacy laws do and don’t apply to health apps, and comparing them with both users’ and developers’ expectations. Studies of health app users will identify users’ privacy expectations and test the usability of privacy interfaces. Studies of health app developers will identify their views on privacy and test privacy-promoting development tools. The combination of these studies will point to interventions, and develop and test practical interface improvements and development tools.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

近年来，用于健康监测的移动应用程序急剧增加，新冠肺炎疫情加速了这一趋势。通过收集和利用海量数据，移动健康应用程序可以彻底改变人们监测自己健康状况的方式，以及他们与医生互动的方式。这场革命可能会因为意外的数据使用和糟糕的隐私保护而脱轨，吓跑了潜在用户。该项目系统地研究了消费者在与移动健康应用互动时的隐私期望、健康应用开发者的隐私视角和行为、法律和相关隐私政策提供的隐私保护以及此类应用的实际数据处理做法之间的潜在脱节。研究团队正在通过展示向开发人员和用户传达隐私信息的新方法来解决已发现的脱节问题。该团队将试图通过以下方式更好地使移动健康应用的实践与消费者的隐私期望保持一致：政策建议、改进透明度和隐私控制机制的经过验证的用户界面构件、监控数据实践和执行隐私法规的实用解决方案，以及为开发人员在设计软件时考虑隐私提供建议。调查人员结合社会科学、计算机安全和隐私、自然语言处理和法律方面的专业知识，全面分析移动健康应用的隐私。他们将通过研究他们的敏感资源使用和网络通信来了解应用程序的实际数据做法。调查人员正在检查目前的隐私法如何适用于健康应用程序，并将其与用户和开发者的预期进行比较。对健康应用程序用户的研究将确定用户的隐私期望，并测试隐私界面的可用性。对健康应用程序开发人员的研究将确定他们对隐私的看法，并测试促进隐私的开发工具。这些研究的结合将指向干预措施，并开发和测试实用的接口改进和开发工具。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。