📣 Help Shape the Future of UKRI's Gateway to Research (GtR)

We're improving UKRI's Gateway to Research and are seeking your input! If you would be interested in being interviewed about the improvements we're making and to have your say about how we can make GtR more user-friendly, impactful, and effective for the Research and Innovation community, please email gateway@ukri.org.

AP4L: Adaptive PETs to Protect & emPower People during Life Transitions

Lead Research Organisation: University of Surrey
Department Name: Computing Science

Abstract

AP4L is a 3-year program of interdisciplinary research, centring on the online privacy & vulnerability challenges that people face when going through major life transitions. Our central goal is to develop privacy-by-design technologies to protect & empower people during these transitions. Our work is driven by a narrative that will be familiar to most people. Life often "just happens", leading people to overlook their core privacy and online safety needs. For instance, somebody undergoing cancer treatment may be less likely to finesse their privacy setting on social media when discussing the topic. Similarly, an individual undergoing gender transition may be unaware of how their online activities in the past may shape the treatment into the future. This project will build the scientific and theoretical foundations to explore these challenges, as well as design and evaluate three core innovations that will address the identified challenges. AP4L will introduce a step-change, making online safety and privacy as painless and seamless as possible during life transitions

To ensure a breadth of understanding, we will apply these concepts to four very different transitions through a series of carefully designed co-creation activities, devised as part of a stakeholder workshop held in Oct'21. These are relationship breakdowns; LBGT+ transitions or transitioning gender; entering/ leaving employment in the Armed Forces; and developing a serious illness or becoming terminally ill. Such transitions can significantly change privacy considerations in unanticipated or counter-intuitive ways. For example, previously enabled location-sharing with a partner may lead to stalking after a breakup; 'coming out' may need careful management across diverse audiences (e.g - friends, grandparents) on social media.

We will study these transitions, following a creative security approach, bringing together interdisciplinary expertise in Computer Science, Law, Business, Psychology and Criminology.
We will systematise this knowledge, and develop fundamental models of the nature of transitions and their interplay with online lives. These models will inform the development of a suite of technologies and solutions that will help people navigate significant life transitions through adaptive, personalised privacy-enhanced interventions that meet the needs of each individual and bolster their resilience, autonomy, competence and connection. The suite will comprise:

(1) "Risk Playgrounds", which will build resilience by helping users to explore potentially risky interactions of life transitions with privacy settings across their digital footprint in safe ways
(2) "Transition Guardians", which will provide real-time protection for users during life transitions.
(3) "Security Bubbles", which will promote connection by bringing people together who can help each other (or who need to work together) during one person's life transition, whilst providing additional guarantees to safeguard everyone involved.

In achieving this vision, and as evidenced by £686K of in-kind contributions, we will work with 26 core partners spanning legal enforcement agencies (e.g., Surrey Police), tech companies (e.g., Facebook, IBM), support networks (e.g., LGBT Foundation, Revenge Porn Helpline) and associated organisations (e.g., Ofcom, Mastercard, BBC). Impact will be delivered through various activities including a specially commissioned BBC series on online life transitions to share knowledge with the public; use of the outputs of our projects by companies & social platforms (e.g., by incorporating into their products, & by designing their products to take into consideration the findings of our project) & targeted workshops to enable knowledge exchange with partners & stakeholders.
 
Description We brought together a large interdisciplinary team of
over 35 people to address these goals from different
disciplinary perspectives, ranging from human factors,
behavioural science and psychology to criminology
and computer science. Six UK universities (Cambridge,
Edinburgh, Edgehill, Queen Mary University of London,
Strathclyde and Surrey) were involved. The project
was divided into three workstreams, but with much
collaboration and crossover between each workstream.
We started from a human factors angle, with one of the
largest-ever online surveys (over 400 people) of this
population, followed by intimate in-person workshops
to draw out nuances and build on survey findings and
provide in-depth real-life experiences.
Based on the insights gained from this human-factors
exploration, AP4L project set out to develop three families
of tools/innovations (See pages 10-14):
Risk Playgrounds, to build resilience by helping people to
explore potentially risky interactions of life transitions with
privacy settings across their digital footprint in safe ways.
Individuals can play around within the Risk Playground
with different scenarios related to their life transition in a
safe and secure environment to experience how different
approaches online could affect them.
Transition Guardians, to provide real-time protection
for users during life transitions. The success of Transition
Guardians hinges on balancing between hampering the
user's online experience through overprotection and
creating risk through underprotection, whilst promoting
a false sense of security. This balance will vary for each
individual user and life transition.
Security Bubbles, to promote connection by bringing
people together who can help each other, or who need
to work together, during one person's life transition, while
providing additional guarantees to safeguard everyone
involved. The idea of a Security Bubble is inspired from
the COVID Support Bubble, which connected different
households to provide support during the challenging
times of the pandemic. On similar lines, a Security Bubble
connects people with similar experiences and expertise to
provide support in a privacy-preserving and secure way.
In our data-driven world, we need not turn too far to
find examples of bad behaviour. We also did largescale data analysis to capture some of the difficult
online harms people experience and also to do a
quantitative comparison of mitigation techniques, such as
decentralised content moderation.
From the beginning, our goal has not only been to
conduct world leading research but also to have tangible
real world impact. In this regard, we have been extremely
lucky to work alongside our 23 project partners, including
LGBT Foundation, Lloyds Banking Group, Macmillan,
Maggie's Centres, Marie Curie, Ofcom, Officers Association
Scotland, Stop Hate UK, Revenge Porn Helpline. As well as
offering general advice, our charity partners have helped
to recruit participants for the surveys and workshops,
and with the correct and current language to use within
the LGBTQI+ community. Our Industry Partners have
participated in interviews and shared information on how
they keep their clients safe online and what they would
benefit from going forward. Our Policy partners have
helped shape the tools we are developing and how they
would be used in a real world scenario.
Exploitation Route The tools we have created are open source and will be available for use and adaptable to other life transitions
Sectors Communities and Social Services/Policy

Digital/Communication/Information Technologies (including Software)

Healthcare

Government

Democracy and Justice

Security and Diplomacy

 
Description The AP4L project has created insights and developed flexible cybersecurity solutions by bringing together diverse perspectives and expertise. By combining knowledge from fields such as human factors, behavioural science and psychology, criminology and computer science, the AP4L project has addressed the evolving and complex challenges in cybersecurity. This collaborative approach has had an impact beyond the parameters of the project remit, and we are proud to share some of the impacts the project has achieved. AP4L developed the following tools which are all open source and available for use by the general public: ? Open source tool for data collection from the Fediverse (Mastodoner) ? Open source browser tool for detecting and flagging accidental self-disclosure (Insight Watcher) ? Risk Playground Tool ? SecureWhispers - Android App for covert and secure communication Two AP4L Co-Investigators secured follow-on funding. Prof. Alice Hutchings at Cambridge University was awarded a Google Academic Research Award. And Prof. Wendy Moncur at Strathclyde University was awarded a REPHRAIN grant for Legal Challenges in the Emergent Use of Text-based Generative AI for UK Research. AP4L Co-Investigators also had some media appearances, with Cambridge University's Prof. Alice Hutchings appearing on Start the Week on BBC Radio 4. Amongst other print media appearances, Dr. Ignacio Castro from Queen Mary University London did two interviews with Spanish publication El Pais. Prof. Wendy Moncur from University of Strathclyde did an interview for Nature on Guidelines for academics aim to lessen ethical pitfalls in generative-AI use. As well as appearing on nine radio and news programmes, with the majority of appearances on the BBC, AP4L PI Prof. Nishanth Sastry (University of Surrey) provided his expertise on the ITV Documentary on Brianna Ghey and social media use on children. Dr. Mike McGuire from University of Surrey and Prof. Karen Renaud from University of Strathclyde collaborated on a paper on the Sub Post Master Post Office Scandal that was used as evidence in the House of Commons by the Father of the House Sir Peter Bottomley: https://youtu.be/ GH9jyCnJI1M?si=yLeQqiTNYOaaObrZ&t=27 Our Co-Investigators and Pre and Post Doc Researchers have also been very busy over the last 3 years and have produced an impressive 45 papers, including 20 A and A* rated, one book chapter, nine talks/presentations/poster presentations, as well as delivering five keynote addresses at leading conferences. The AP4L project has not only advanced cybersecurity research, but also demonstrated the power of interdisciplinary collaboration in addressing complex security challenges. With contributions from various fields, the project has made significant strides in improving both the understanding and practical solutions for cybersecurity. The ongoing impact of the project is evident through the follow-on funding, media recognition, and the array of tools, research papers, and presentations.
First Year Of Impact 2022
Sector Government, Democracy and Justice,Security and Diplomacy
Impact Types Cultural

Societal

Policy & public services

 
Description ICO 
Organisation Information Commissioner's Office
Country United Kingdom 
Sector Public 
PI Contribution We have discussed with ICO the potential for PETs to be used in life transitions
Collaborator Contribution ICO have offered to do joint case studies with us for relevant PETs we develop
Impact None yet
Start Year 2023
 
Description Mission de Reya LLP 
Organisation Mishcon De Reya
Country United Kingdom 
Sector Private 
PI Contribution We have started to engage with Mishcon about understanding relationship breakdowns and privacy concerns therein
Collaborator Contribution Mishcon have contributed a potential use case of high net-worth elderly individuals who lose a spouse and suddenly come into lot of money as inheritance, but do not have prior experience managing their finances. This creates new privacy problems in their lives which we will look to address in partnership.
Impact No outputs yet
Start Year 2023
 
Description An Email Dataset for Analyzing Large-Group Decision-Making 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Postgraduate students
Results and Impact The talk presented a novel dataset and how can it be used by other parties. This sparked questions, potential future collaborations and general interest in using this dataset
Year(s) Of Engagement Activity 2023
URL https://sites.google.com/view/icwsm2023datachallenge/home
 
Description Decentralising social networks? An in-depth analysis of Bluesky 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Postgraduate students
Results and Impact About 50 PhD students, postdocs, and faculty members attended the talk. The talk informed their views and changed their perspectives on recent social media developments
Year(s) Of Engagement Activity 2025
URL https://networks.imdea.org/whatsnew/events-agenda/decentralising-social-networks-an-in-depth-analysi...
 
Description Internet Global Forum presentation 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Policymakers/politicians
Results and Impact Presentation at the IGF which resulted in an interesting debate with the audience on the relevance of the topic and how to bridge the gap of understanding across the multiple stakeholders
Year(s) Of Engagement Activity 2023
URL https://dig.watch/?post_type=event&p=149752
 
Description Keynote - Graphs as a powerful abstraction for Protecting & Empowering People Online 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Postgraduate students
Results and Impact Keynote at a conference/symposium/ workshop.
Year(s) Of Engagement Activity 2023
URL https://60th-kis2023.kait.jp/
 
Description Keynote - Making Imaging Data Meaningful: Lessons from Social Media 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Postgraduate students
Results and Impact Keynote at a conference/symposium/ workshop.
Year(s) Of Engagement Activity 2023
URL https://60th-kis2023.kait.jp/
 
Description Keynote Talk - Enterprise Knowledge Graphs Using Large Language Models 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Industry/Business
Results and Impact Keynote at a conference/symposium/ workshop
Year(s) Of Engagement Activity 2023
URL https://wsl.iiitb.ac.in/cikm-2023-keynote-talks
 
Description Keynote Talk - SocialSec 2023: 9th International Symposium on Security and Privacy in Social Networks and Big Data 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Industry/Business
Results and Impact Keynote at a conference/symposium/ workshop.
Year(s) Of Engagement Activity 2023
URL https://nss-socialsec2023.cyber.kent.ac.uk/keynotes.php
 
Description New Research Group at the Internet Research Task Force 
Form Of Engagement Activity A formal working group, expert panel or dialogue
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Professional Practitioners
Results and Impact I created and chair a Research Group at the Internet Research Task Force. The Research Group meets 3 times a year at associated Internet Engineering Task Force Meetings. In the multiple meeting of the research group, there has been a wide discussion and interest in follow up activities, and engagement.
Year(s) Of Engagement Activity 2023,2024
URL https://datatracker.ietf.org/rg/rasprg/about/
 
Description Paper Presentation - Understanding online harms and safety of vulnerable groups going through serious life transitions 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Postgraduate students
Results and Impact Workshop presentation at the 8th Workshop on Inclusive Privacy and Security, part of the SOUPS'23 conference. The workshop was attended by academics at various stages of their career ranging from PhD students to professors. This venue enabled us to educate others on the design decisions required to conduct ethical security/privacy research with people going through life transitions.
Year(s) Of Engagement Activity 2023
URL https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Finclusiveprivacy.org%2Fworkshops%2...
 
Description Poster Presentation - Sensitive Methods and Empathy for Understanding Privacy Needs of Those Living through Serious Life Transitions. 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Postgraduate students
Results and Impact Conference poster presentation at the Behavioural and Social Sciences in Security Conference (BASS'23) where the audience consisted of a variety of disciplines across academia, the third sector, and industry. The venue enabled us to gauge whether the technological and methodological approaches being used in our research were ethically responsible.
Year(s) Of Engagement Activity 2023
URL https://crestresearch.ac.uk/bass23/
 
Description Poster Presentation - Using Social Media Posts as Prompts to ChatGPT to Produce Tailored Privacy Advice for People Going Through Life Transitions 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Postgraduate students
Results and Impact Conference poster presentation at the Behavioural and Social Sciences in Security Conference (BASS'23) where the audience consisted of a variety of disciplines across academia, the third sector, and industry. The venue enabled us to gauge whether the technological and methodological approaches being used in our research were ethically responsible.
Year(s) Of Engagement Activity 2023
URL https://crestresearch.ac.uk/bass23/
 
Description Redes sociales evolución y alternativas: Twitter, Mastodon, Bluesky 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Media (as a channel to the public)
Results and Impact Science journalists from the Spanish centre for advanced scientific studies attended the event. The event informed them on recent developments on social media networks.
Year(s) Of Engagement Activity 2025
 
Description Talk - 2nd CyberMi2 Research Day, 2024 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Postgraduate students
Results and Impact The CiberMi2' 2024 event was an invitation-only event. The representatives from various universities across UK presented their work on security and privacy (SP) and minority and minoritized users. The event also hosted a group brainstorming discussion on topics such as FemTech and responsible technology.
Year(s) Of Engagement Activity 2024
URL https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsites.google.com%2Fview%2Fmaryammj...
 
Description Talk at RIPE 87 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Professional Practitioners
Results and Impact The RIPE 87 meeting had 556 physical attendants and 455 remote ones. The presentation sparked a debate with practitioners and attendants engaged in policy making.
Year(s) Of Engagement Activity 2023
URL https://ripe87.ripe.net/archives/video/1247/
 
Description Talk at a IAAA ICWSM workshop (Flocking to Mastodon: Tracking the Great Twitter Migration) 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Postgraduate students
Results and Impact The talk discussed how users transitioned from Twitter to Mastodon and how their language evolved and whether conversations were more or less toxic in one platform or the other
Year(s) Of Engagement Activity 2023
URL https://sites.google.com/view/icwsm2023datachallenge/home
 
Description Talk by Prof. Wendy Moncur - Navigating bias in online privacy research 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Industry/Business
Results and Impact Talk to DSTL
Year(s) Of Engagement Activity 2023
 
Description Talk by Prof. Wendy Moncur - Navigating change and Cyber Security Risks 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Industry/Business
Results and Impact Talk to Financial Conduct Authority
Year(s) Of Engagement Activity 2023
URL https://pureportal.strath.ac.uk/en/activities/navigating-change-and-cyber-security-risks
 
Description ¿Y si nos vamos de Twitter, qué? 
Form Of Engagement Activity A formal working group, expert panel or dialogue
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Media (as a channel to the public)
Results and Impact This ewas a debate with scientific communicators and journalists debating the different social media alternatives and who were considering to abandon twitter.
Year(s) Of Engagement Activity 2025
URL https://aecomunicacioncientifica.org/adios-twitter-x-hola-bluesky/