Collaborative Research: SaTC: CORE: Medium: Beyond App-centric Privacy: Investigating Privacy Ecosystems among Vulnerable Populations

许多隐私研究采取了以应用程序为中心的方法，狭隘地关注于了解用户对应用程序隐私风险的担忧（如果有的话），并减轻疾病的症状证据（特定应用程序泄露的数据）。这个项目解决了隐私生态系统，一个连锁的数据网络，可以涵盖从信用卡购买到位置历史到通信元数据的一切。更大的隐私生态系统超越了特定应用程序的风险，旨在减轻威胁人们的多种隐私风险，特别是那些更容易受到隐私泄露风险和后果伤害的弱势群体。健康是一个关键的背景和领域，在这个背景和领域中，需要对隐私有一个广泛的看法。该项目超越了以应用程序为中心的健康隐私观点，旨在研究弱势个体在医疗保健背景下的隐私行为。它开发和评估这些人可以更好地保护自己的方法，以及帮助医疗保健提供者支持客户隐私的工具。通过包括深入访谈和系统分析在内的定性研究，该项目正在描述弱势个体在其医疗保健背景下所经历的风险的理解，同时考虑到个人应用程序之外的广泛隐私生态系统。定性研究也在探索服务提供者的作用，包括图书馆员，社会工作者，教师和医疗保健专业人员在提供隐私管理策略。 通过包括深入访谈和系统分析在内的定性研究，该项目正在描述弱势个体在其医疗保健背景下所经历的风险的理解，同时考虑到个人应用程序之外的广泛隐私生态系统。这项研究的第二部分涉及弱势群体、服务提供商和隐私专家。采用启发式设计来开发和评估支持隐私生态系统管理的工具包。该研究项目正在开发一个免费的隐私工具包，旨在为那些为弱势群体提供支持和指导的人提供帮助，以减轻隐私伤害。该项目有助于了解弱势群体的隐私风险和管理，并为隐私和安全研究人员研究弱势群体的隐私保护提供了一个新的框架。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Much privacy research has taken an app-centric approach, narrowly focused on understanding user concerns, if any, with privacy risks of an app and alleviating the symptomatic evidence of the ailment (data leaked by a specific app). This project tackles the privacy ecosystem, an interlocking web of dataveillance that can encompass everything from credit card purchases to location history to communications metadata. The larger privacy ecosystems goes beyond the risks of particular apps and aims to mitigate the multiple privacy risks that threaten people, particularly vulnerable individuals who are both more at risk of privacy breaches and more harmed by their consequences. Health is a key context and domain in which a broad view of privacy is necessary. This project goes beyond app-centric views of health privacy and aims to examine vulnerable individuals’ privacy behaviors in the healthcare context. It develops and evaluates ways that these individuals can better protect themselves, as well as tools to help healthcare providers support their clients’ privacy. Through qualitative research that includes in-depth interviews and systematic analysis, this project is characterizing the understanding of risk experienced by vulnerable individuals in the context of their healthcare, taking into account the broad privacy ecosystem beyond individual apps. Qualitative research also is exploring the role of service providers, including librarians, social workers, teachers, and healthcare professionals in providing privacy management strategies. Through qualitative research that includes in-depth interviews and systematic analysis, this project is characterizing the understanding of risk experienced by vulnerable individuals in the context of their healthcare, taking into account the broad privacy ecosystem beyond individual apps. The second part of this research involves vulnerable populations, service providers, and privacy experts. Participatory design is employed to develop and evaluate a toolkit to support privacy ecosystem management. This research project is developing a freely available privacy toolkit designed for those who provide support and guidance to vulnerable individuals to help mitigate privacy harms. The project is contributing to understanding privacy risk and management for vulnerable individuals and provides a new frame for privacy and security researchers in the study of privacy protection for vulnerable communities.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.