Testing for Transparency: designing privacy-informing systems for young people

Lead Research Organisation: University of Nottingham
Department Name: School of Computer Science

Abstract

The aim of my PhD is to assess emerging privacy policy presentation techniques ("policy presentations") by studying the impact they have on children and young people. It is well established that the current 'consent-and-notice' approach to managing user privacy has not been effective online [5] [7]. Consent-and-notice refers to the approach of providing a privacy notice at the point of a user's contact with an online service, and then asking for that user to consent (or to withdraw consent) toward the privacy practices that have been explained within it. This approach has been criticised for its lengthiness, the timing of when notices are displayed, and the power asymmetry it encourages, amongst other things [2] [3].

One method of addressing the problems inherent in notice-and-consent is to alter how website privacy practices are presented to people. Privacy researchers have suggested and tested using alternative formats, visual and other mediums including short or 'layered' notices, privacy nutrition labels, graphics and privacy dashboards to name a few.

It is assumed that alternative policy presentations could provide a means of enhancing the transparency of online privacy policies, and therefore positively affect the habits of internet users. Although counter-arguments do exist, and the evidence supporting this assumption is mixed [4][6], this appears to be a direction that the industry is taking to alter practice, particularly as it relates to children: Recently, the Information Commissioner's Office (ICO) recommended using novel presentation formats in their guidelines for transparency within the Age Appropriate Design Code, their guidelines for creating GDPR-compliant, child-facing internet services. Young people have expressed concerns about the ways their data is used and how privacy policies are presented to them, and there is some evidence that they would welcome attempts to tailor solutions to them [1] [7]. If the former assumption about transparency is correct, alternative policy presentations designed with young people in mind could encourage their engagement, lead them to better understand terms of service, and result in them adopting better privacy practices. However, research on novel approaches to displaying privacy policies designed by and for young people is lacking. My PhD will explore these alternative privacy policy presentations to see whether their use can have an effect on young people's privacy practices, and to what extent the co-creation of policy presentation formats can increase their effectiveness.

Publications

10 25 50

Studentship Projects

Project Reference Relationship Related To Start End Student Name
EP/S023305/1 01/10/2019 31/03/2028
2278828 Studentship EP/S023305/1 01/10/2019 30/09/2023 Ephraim Ntinou Luwemba