Collaborative Research: SaTC: CORE: Medium: Beyond App-centric Privacy: Investigating Privacy Ecosystems among Vulnerable Populations

许多隐私研究采取了以应用程序为中心的方法，狭隘地专注于了解用户对应用程序隐私风险的担忧，并缓解疾病的症状证据(特定应用程序泄露的数据)。该项目涉及隐私生态系统，这是一个相互关联的数据监控网络，可以涵盖从信用卡购买到位置历史到通信元数据的一切。更大的隐私生态系统超越了特定应用程序的风险，旨在缓解威胁人们的多重隐私风险，特别是脆弱的个人，他们既面临更大的隐私泄露风险，也更受其后果的伤害。健康是一个关键的背景和领域，在这个领域中，对隐私的广泛看法是必要的。该项目超越了以应用程序为中心的健康隐私观点，旨在检查易受攻击的个人在医疗保健环境中的隐私行为。它开发和评估这些个人能够更好地保护自己的方法，以及帮助医疗保健提供者支持客户隐私的工具。通过包括深入访谈和系统分析在内的定性研究，该项目正在表征易受攻击的个人在其医疗保健背景下经历的风险的理解，并考虑到个人应用程序以外的广泛隐私生态系统。定性研究还在探索服务提供者在提供隐私管理策略方面的作用，包括图书馆员、社会工作者、教师和医疗保健专业人员。通过包括深入访谈和系统分析在内的定性研究，该项目正在表征易受攻击的个人在其医疗保健背景下经历的风险的理解，并考虑到个人应用程序以外的广泛隐私生态系统。这项研究的第二部分涉及弱势群体、服务提供商和隐私专家。采用参与式设计来开发和评估支持隐私生态系统管理的工具包。该研究项目正在开发一个免费提供的隐私工具包，专为那些为易受攻击的个人提供支持和指导的人而设计，以帮助减轻对隐私的损害。该项目有助于了解弱势个人的隐私风险和管理，并为隐私和安全研究人员提供了一个新的框架，研究弱势群体的隐私保护。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Much privacy research has taken an app-centric approach, narrowly focused on understanding user concerns, if any, with privacy risks of an app and alleviating the symptomatic evidence of the ailment (data leaked by a specific app). This project tackles the privacy ecosystem, an interlocking web of dataveillance that can encompass everything from credit card purchases to location history to communications metadata. The larger privacy ecosystems goes beyond the risks of particular apps and aims to mitigate the multiple privacy risks that threaten people, particularly vulnerable individuals who are both more at risk of privacy breaches and more harmed by their consequences. Health is a key context and domain in which a broad view of privacy is necessary. This project goes beyond app-centric views of health privacy and aims to examine vulnerable individuals’ privacy behaviors in the healthcare context. It develops and evaluates ways that these individuals can better protect themselves, as well as tools to help healthcare providers support their clients’ privacy. Through qualitative research that includes in-depth interviews and systematic analysis, this project is characterizing the understanding of risk experienced by vulnerable individuals in the context of their healthcare, taking into account the broad privacy ecosystem beyond individual apps. Qualitative research also is exploring the role of service providers, including librarians, social workers, teachers, and healthcare professionals in providing privacy management strategies. Through qualitative research that includes in-depth interviews and systematic analysis, this project is characterizing the understanding of risk experienced by vulnerable individuals in the context of their healthcare, taking into account the broad privacy ecosystem beyond individual apps. The second part of this research involves vulnerable populations, service providers, and privacy experts. Participatory design is employed to develop and evaluate a toolkit to support privacy ecosystem management. This research project is developing a freely available privacy toolkit designed for those who provide support and guidance to vulnerable individuals to help mitigate privacy harms. The project is contributing to understanding privacy risk and management for vulnerable individuals and provides a new frame for privacy and security researchers in the study of privacy protection for vulnerable communities.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.