A Design Space for Privacy Choices: Towards Meaningful Privacy Control in the Internet of Things

Feng, Yuanyuan; Yao, Yaxing; Sadeh, Norman

doi:10.1145/3411764.3445148

Cited by 67 publications

(38 citation statements)

References 95 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Noting that inform is more common than control may also signal that users are not receiving as much control and are only informed about privacy practices (e.g., requested permissions) more than having the controls and options to accept or reject a privacy-related feature. Although usable privacy researchers have proposed and evaluated various designs of usable and effective privacy notices and controls [20,51], only the formats required by laws and platforms such as privacy policies and permissions were mentioned in Stack Overflow answers, which may suggest that the academic usable privacy work may still require effort to make it usable to developers. Future work may want to promote these designs through building an open-source, easy-touse and integrate, and customizable consent pop up (or in general, notifications with controls).…”

Section: Most Frequent: Inform and Controlmentioning

confidence: 99%

Understanding Privacy-Related Advice on Stack Overflow

Tahaei

Vaniea

2022

Proceedings on Privacy Enhancing Technologies

View full text Add to dashboard Cite

Privacy tasks can be challenging for developers, resulting in privacy frameworks and guidelines from the research community which are designed to assist developers in considering privacy features and applying privacy enhancing technologies in early stages of software development. However, how developers engage with privacy design strategies is not yet well understood. In this work, we look at the types of privacy-related advice developers give each other and how that advice maps to Hoepman’s privacy design strategies. We qualitatively analyzed 119 privacy-related accepted answers on Stack Overflow from the past five years and extracted 148 pieces of advice from these answers. We find that the advice is mostly around compliance with regulations and ensuring confidentiality with a focus on the inform, hide, control, and minimize of the Hoepman’s privacy design strategies. Other strategies, abstract, separate, enforce, and demonstrate, are rarely advised. Answers often include links to official documentation and online articles, highlighting the value of both official documentation and other informal materials such as blog posts. We make recommendations for promoting the under-stated strategies through tools, and detail the importance of providing better developer support to handle third-party data practices.

show abstract

Section: Most Frequent: Inform and Controlmentioning

confidence: 99%

Understanding Privacy-Related Advice on Stack Overflow

Tahaei

Vaniea

2022

Proceedings on Privacy Enhancing Technologies

View full text Add to dashboard Cite

show abstract

“…Therefore, the data practices included in PrivacyCube notify individuals about the collected data type, data usage, data access, data location, and data retention period. Based on multiple privacy policies templates included in the IoT Assistant App [8], we created a graph, Figure 2, mapping the IoT devices displayed on PrivacyCube. Each cube face represents different data practices related to IoT as pictured in Figure 1.…”

Section: Methodsmentioning

confidence: 99%

Demo Abstract: PrivacyCube: A Tangible Device for Improving Privacy Awareness in IoT

Muhander

Rana

Arachchilage

et al. 2022

2022 IEEE/ACM Seventh International Conference on Internet-of-Things Design and Implementation (IoTDI)

View full text Add to dashboard Cite

Consumers increasingly bring IoT devices into their living spaces without understanding how their data is collected, processed, and used. We present PrivacyCube, a novel tangible device designed to explore the extent to which privacy awareness in smart homes can be elevated. PrivacyCube visualises IoT devices' data consumption displaying privacy-related notices. PrivacyCube aims at assisting families to (i) understand key privacy aspects better and (ii) have conversations around data management practices of IoT devices. Thus, families can learn and make informed privacy decisions collectively.

show abstract

“…Thus, researchers and designers need to more fully examine the design space for providing various privacy mechanisms and controls. A good example is a recent paper by Feng et al, which introduced a design space for privacy choices in which they present five key dimensions of providing meaningful privacy controls in IoT [74]. These five dimensions include choice type, functionality, timing, channel, and modality.…”

Section: Solutions and Guidelinesmentioning

confidence: 99%

Privacy and the Internet of Things

Lipford

Tabassum

Bahirat

et al. 2021

Modern Socio-Technical Perspectives on Privacy

Self Cite

View full text Add to dashboard Cite

Using networks of Internet-connected sensors, the Internet of Things (IoT) makes technologies “smart” by enabling automation, personalization, and remote control. At the same time, IoT technologies introduce challenging privacy issues that may frustrate their widespread adoption. This chapter addresses the privacy challenges of IoT technologies from a user-centered perspective and demonstrates these prevalent issues in the domains of wearables (e.g., fitness trackers), household technologies (e.g., smart voice assistants), and devices that exist in the public domain (e.g., security cameras). The chapter ends with a comprehensive list of solutions and guidelines that can help researchers and practitioners introduce usable privacy to the domain of IoT.

show abstract

A Design Space for Privacy Choices: Towards Meaningful Privacy Control in the Internet of Things

Cited by 67 publications

References 95 publications

Understanding Privacy-Related Advice on Stack Overflow

Understanding Privacy-Related Advice on Stack Overflow

Demo Abstract: PrivacyCube: A Tangible Device for Improving Privacy Awareness in IoT

Privacy and the Internet of Things

Contact Info

Product

Resources

About