research-article

Standardizing privacy notices: an online study of the nutrition label approach

Authors:

Patrick Gage Kelley,

Lorrie Faith CranorAuthors Info & Claims

CHI '10: Proceedings of the SIGCHI Conference on Human Factors in Computing Systems

Pages 1573 - 1582

https://doi.org/10.1145/1753326.1753561

Published: 10 April 2010 Publication History

Abstract

Earlier work has shown that consumers cannot effectively find information in privacy policies and that they do not enjoy using them. In our previous research we developed a standardized table format for privacy policies. We compared this standardized format, and two short variants (one tabular, one text) with the current status quo: full text natural-language policies and layered policies. We conducted an online user study of 764 participants to test if these three more-intentionally designed, standardized privacy policy formats, assisted by consumer education, can benefit consumers. Our results show that standardized privacy policy presentations can have significant positive effects on accuracy and speed of information finding and on reader enjoyment of privacy policies.

References

[1]

S. Balasubramanian and C. Cole. Consumers' search and use of nutrition information: The challenge and promise of the nutrition labeling and education act. In Journal of Marketing, 2002.

[2]

L.F. Cranor. Web Privacy with P3P. O'Reilly and Associates, Sebastopol, CA, 2002.

Digital Library

[3]

A. Drichoutis, P. Lazaridis, and R. Nayga. Consumers' use of nutritional labels. In Academy Marketing Science Review, 2006.

[4]

C. Jensen and C. Potts. Privacy policies as decision-making tools: An evaluation of online privacy notices. In Proceedings of the SIGCHI conference on Human Factors in Computing Systems, pages 471--478, Vienna, Austria, 2004.

Digital Library

[5]

P. Kelley, L. Cesca, J. Bresee, and L. Cranor. Standardizing privacy notices: An online study of the nutrition label approach. Technical Report CMU-CyLab-09-014, Carnegie Mellon University, November 2009.

[6]

P.G. Kelley, J. Bresee, L.F. Cranor, and R.W. Reeder. A "Nutrition Label" for Privacy. In Proceedings of the 2009 Symposium On Usable Privacy and Security (SOUPS), 2009.

Digital Library

[7]

Kleimann Communication Group Inc. Evolution of a prototype financial privacy notice., February 2006. http://www.ftc.gov/privacy/privacy initiatives/ftcfinalreport060228.pdf.

[8]

A. Levy and M. Hastak. Consumer comprehension of financial privacy notices: A report on the results of the quantitative testing, 2008. http://www.ftc.gov/privacy/privacy initiatives/Levy-Hastak-Report.pdf.

[9]

A. McDonald and L. Cranor. The cost of reading privacy policies. In Proceedings of the Technology Policy Research Conference, September 26-28 2008.

[10]

A.M. McDonald, R.W. Reeder, P.G. Kelley, and L.F. Cranor. A comparative study of online privacy policies and formats. In Proceedings of 2009 Workshop on Privacy Enhancing Technologies. ACM, 2009.

Digital Library

[11]

R. Reeder, L. Cranor, P. Kelley, and A. McDonald. A user study of the expandable grid applied to p3p privacy policy visualization. In Workshop on Privacy in the Electronic Society, 2008.

Digital Library

[12]

The Center for Information Policy Leadership. Multi-Layered Notices Explained, 2004. http://www.hunton.com/files/tbls47Details/FileUpload265/1303/CIPLAPECNotices White Paper.pdf.

[13]

The Center for Information Policy Leadership. Ten steps to develop a multilayered privacy notice, 2005. http://www.hunton.com/files/tbls47Details/FileUpload265/1405/Ten_Steps_whitepaper.pdf.

[14]

United States Code. 6803. Disclosure of institution privacy policy, 2008. http://www.ftc.gov/privacy/glbact/_glbsub1.htm#6803.

[15]

World Wide Web Consortium. The platform for privacy preferences 1.1 (p3p1.1) specification, 2006. http://www.w3.org/TR/P3P11/.

Cited By

Zhang JChen YLiu CNiu N(2025)Semantic Parsing of Data Practice Statements in Privacy Policies Using BERT ModelsAdvances in Data and Information Sciences10.1007/978-981-97-7360-2_33(387-397)Online publication date: 3-Jan-2025
https://doi.org/10.1007/978-981-97-7360-2_33
Pan STao ZHoang TZhang DLi TXing ZXu XStaples MRakotoarivelo TLo DBalzarotti DXu W(2024)A NEW HOPEProceedings of the 33rd USENIX Conference on Security Symposium10.5555/3698900.3699219(5699-5716)Online publication date: 14-Aug-2024
https://dl.acm.org/doi/10.5555/3698900.3699219
Khandelwal RNayak AChung PFawaz KBalzarotti DXu W(2024)Unpacking privacy labelsProceedings of the 33rd USENIX Conference on Security Symposium10.5555/3698900.3699059(2831-2848)Online publication date: 14-Aug-2024
https://dl.acm.org/doi/10.5555/3698900.3699059
Show More Cited By

Index Terms

Standardizing privacy notices: an online study of the nutrition label approach

Recommendations

A "nutrition label" for privacy
SOUPS '09: Proceedings of the 5th Symposium on Usable Privacy and Security

We used an iterative design process to develop a privacy label that presents to consumers the ways organizations collect, use, and share personal information. Many surveys have shown that consumers are concerned about online privacy, yet current ...
A Comparative Study of Privacy Mechanisms and a Novel Privacy Mechanism [Short Paper]
Information and Communications Security
Abstract
Privacy of PII(Personally Identifiable Information) on the Internet is a major concern of a netizen. On the Internet different service providers are supposed to publish their own privacy policies but understanding of these policies is a major ...
A user study of the expandable grid applied to P3P privacy policy visualization
WPES '08: Proceedings of the 7th ACM workshop on Privacy in the electronic society

Displaying website privacy policies to consumers in ways they understand is an important part of gaining consumers' trust and informed consent, yet most website privacy policies today are presented in confusing, legalistic natural language. Moreover, ...

Comments

Information & Contributors

Information

Published In

cover image ACM Conferences

CHI '10: Proceedings of the SIGCHI Conference on Human Factors in Computing Systems

April 2010

2690 pages

ISBN:9781605589299

DOI:10.1145/1753326

General Chair:
Elizabeth Mynatt
Georgia Institute of Technology
,
Program Chairs:
Geraldine Fitzpatrick
Vienna University of Technology
,
Scott Hudson
Carnegie Mellon University
,
Keith Edwards
Georgia Tech
,
Tom Rodden
University of Nottingham

Copyright © 2010 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

Sponsors

SIGCHI: ACM Special Interest Group on Computer-Human Interaction

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 10 April 2010

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Research-article

Conference

CHI '10

Sponsor:

SIGCHI

CHI '10: CHI Conference on Human Factors in Computing Systems

April 10 - 15, 2010

Georgia, Atlanta, USA

Acceptance Rates

Overall Acceptance Rate 6,199 of 26,314 submissions, 24%

Upcoming Conference

CHI 2025

Sponsor:
sigchi

ACM CHI Conference on Human Factors in Computing Systems

April 26 - May 1, 2025

Yokohama , Japan

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

157
Total Citations
View Citations
2,006
Total Downloads

Downloads (Last 12 months)219
Downloads (Last 6 weeks)21

Reflects downloads up to 05 Feb 2025

Other Metrics

View Author Metrics

Citations

Cited By

Zhang JChen YLiu CNiu N(2025)Semantic Parsing of Data Practice Statements in Privacy Policies Using BERT ModelsAdvances in Data and Information Sciences10.1007/978-981-97-7360-2_33(387-397)Online publication date: 3-Jan-2025
https://doi.org/10.1007/978-981-97-7360-2_33
Pan STao ZHoang TZhang DLi TXing ZXu XStaples MRakotoarivelo TLo DBalzarotti DXu W(2024)A NEW HOPEProceedings of the 33rd USENIX Conference on Security Symposium10.5555/3698900.3699219(5699-5716)Online publication date: 14-Aug-2024
https://dl.acm.org/doi/10.5555/3698900.3699219
Khandelwal RNayak AChung PFawaz KBalzarotti DXu W(2024)Unpacking privacy labelsProceedings of the 33rd USENIX Conference on Security Symposium10.5555/3698900.3699059(2831-2848)Online publication date: 14-Aug-2024
https://dl.acm.org/doi/10.5555/3698900.3699059
Balash DAli MKanich CAviv AKelley PKapadia A(2024)"I would not install an app with this label"Proceedings of the Twentieth USENIX Conference on Usable Privacy and Security10.5555/3696899.3696921(413-432)Online publication date: 12-Aug-2024
https://dl.acm.org/doi/10.5555/3696899.3696921
Zhang SKlucinec LNorton KSadeh NCranor LKelley PKapadia A(2024)Exploring expandable-grid designs to make iOS app privacy labels more usableProceedings of the Twentieth USENIX Conference on Usable Privacy and Security10.5555/3696899.3696907(139-157)Online publication date: 12-Aug-2024
https://dl.acm.org/doi/10.5555/3696899.3696907
Javed YSajid A(2024)A Systematic Review of Privacy Policy LiteratureACM Computing Surveys10.1145/369839357:2(1-43)Online publication date: 1-Oct-2024
https://dl.acm.org/doi/10.1145/3698393
Xiao YNadkarni ALiao XTorres-Arias SDe Carli LZhang Y(2024)Enhancing Transparency and Accountability of TPLs with PBOM: A Privacy Bill of MaterialsProceedings of the 2024 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses10.1145/3689944.3696159(1-11)Online publication date: 19-Nov-2024
https://dl.acm.org/doi/10.1145/3689944.3696159
Crawford KKhoo YKumar AMentis HHamidi F(2024)Decoding the Privacy Policies of Assistive TechnologiesProceedings of the 21st International Web for All Conference10.1145/3677846.3677850(87-95)Online publication date: 13-May-2024
https://dl.acm.org/doi/10.1145/3677846.3677850
Ma YSew CSarsenbayeva ZKnibbe JGoncalves J(2024)Understanding Users' Perspectives on Location Privacy Management on iPhonesProceedings of the ACM on Human-Computer Interaction10.1145/36765298:MHCI(1-25)Online publication date: 24-Sep-2024
https://dl.acm.org/doi/10.1145/3676529
Shiri VXiong MCheng JGuo J(2024)Motivating Users to Attend to Privacy: A Theory-Driven Design StudyProceedings of the 2024 ACM Designing Interactive Systems Conference10.1145/3643834.3661544(258-275)Online publication date: 1-Jul-2024
https://dl.acm.org/doi/10.1145/3643834.3661544
Show More Cited By

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Figures

Tables

Media

View Table of Conten