Bringing Design to the Privacy Table

Abstract

In calls for privacy by design (PBD), regulators and privacy scholars have investigated the richness of the concept of "privacy." In contrast, "design" in HCI is comprised of rich and complex concepts and practices, but has received much less attention in the PBD context. Conducting a literature review of HCI publications discussing privacy and design, this paper articulates a set of dimensions along which design relates to privacy, including: the purpose of design, which actors do design work in these settings, and the envisioned beneficiaries of design work. We suggest new roles for HCI and design in PBD research and practice: utilizing valuesand critically-oriented design approaches to foreground social values and help define privacy problem spaces. We argue such approaches, in addition to current "design to solve privacy problems" efforts, are essential to the full realization of PBD, while noting the politics involved when choosing design to address privacy. CCS CONCEPTS • Security and privacy → Human and societal aspects of security and privacy; • Social and professional topics → Computing / technology policy; • Human-centered computing → HCI design and evaluation methods.

Body Matters

“…Therefore, despite being excited by the potential of novel biofeedback technologies to facilitate meditation training, most participants said that they would only use such systems if they were in control of their personal data and it was not shared with others, unless they chose to. These findings echo others regarding the ethics of self-tracking technologies, particularly for wellbeing or health [14,52,73].…”

Understanding Privacy-Related Questions on Stack Overflow

“…For instance, software developers are expected to pay attention to activities that can threaten privacy in information systems such as data transfer, storage, and processing [64]. Notice and choice, privacy-by-policy, privacy-by-architecture [64], and Privacy by Design (PbD) [20,21,35,39,73] are some examples among many other frameworks which include practices and guidelines to bring privacy into the design space.…”

Co-Designing for Privacy, Transparency, and Trust in K-12 Learning Analytics

“…By employing an iterative design method, we discovered how intentionally designing tasks, discourses and participant structures -and not simply tools or features in a system -revealed key ways to elicit transparency and trust for our partners' [43] within a school organizations. By doing so, this study attempts to move beyond checklist approaches [42] to intentionally design, test and refine LA tools that are responsive to the local and contextually-bound views K-12 educators have of ethics [11,36].…”

“…Scholars have long understood that any designed tool necessarily carries the choices and intentionalities -or "politics" -of its creators [41]. Several studies have tried to establish frameworks and paradigms for incorporating privacy protections in digital tools [39,42,43]. One example is Privacy by Design (PBD), a model that adopts a proactive, rather than reactive, stance for integrating privacy into information-rich tools.…”

“…A key way to deal with privacy trade-offs is by employing participatory and critical design practices. Wong and colleagues [42] suggested that employing such practices would allow designers to go beyond compliance and checklists -which typically reify legal requirements -to encourage deeper and more holistic reflections based on users' values and representations of ethics and privacy.…”