Longitudinal Compliance Analysis of Android Applications with Privacy Policies

Hashmi, Saad Sajid; Waheed, Nazar; Tangari, Gioacchino; Ikram, Muhammad; Smith, Stephen

doi:10.1007/978-3-030-94822-1_16

Cited by 5 publications

(4 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Several non-compliant activities were identified in the post-PIPL privacy policies and were loosely grouped into four categories (Table 3). Similar to prior work [27,43], we also found non-compliant activities such as unclear data sharing policies, unclaimed information collecting and processing, vague data retention policies, and insufficient data protection.…”

Section: Non-compliant Activities Specified In Privacy Policiessupporting

confidence: 82%

Understanding Chinese Internet Users' Perceptions of, and Online Platforms' Compliance with, the Personal Information Protection Law (PIPL)

Zhou,

Qu,

Wan

et al. 2024

Proc. ACM Hum.-Comput. Interact.

View full text Add to dashboard Cite

The Personal Information Protection Law (PIPL) was implemented in November 2021 to safeguard the personal information rights and interests of Internet users in China. However, the impact and existing shortcomings of the PIPL remain unclear, carrying significant implications for policymakers. This study examined privacy policies on 13 online platforms before and after the PIPL. Concurrently, it conducted semi-structured interviews with 30 Chinese Internet users to assess their perceptions of the PIPL. Users were also given tasks to identify non-compliance within the platforms, assessing their ability to address related privacy concerns effectively. The research revealed various instances of non-compliance in post-PIPL privacy policies, especially concerning inadequate risk assessments for sensitive data. Although users identified some non-compliant activities like app eavesdropping, issues related to individual consent proved challenging. Surprisingly, over half of the interviewees believed that the government could access their personal data without explicit consent. Our findings and implications can be valuable for lawmakers, online platforms, users, and future researchers seeking to enhance personal privacy practices both in China and globally.

show abstract

Section: Non-compliant Activities Specified In Privacy Policiessupporting

confidence: 82%

Understanding Chinese Internet Users' Perceptions of, and Online Platforms' Compliance with, the Personal Information Protection Law (PIPL)

Zhou,

Qu,

Wan

et al. 2024

Proc. ACM Hum.-Comput. Interact.

View full text Add to dashboard Cite

show abstract

“…First, it examines the impact of privacy interpretation information on users’ willingness to accept targeted advertising from the perspective of cognitive load, which provides a new explanatory mechanism for research on both privacy interpretation information and willingness to accept targeted advertising. In the field of recommendation interpretation, scholars have investigated targeted advertising through vague and holistic privacy interpretation information (Hashmi et al, 2021 ; Johnson et al, 2020 ; Liu et al, 2022 ; Seng et al, 2021 ; Wei et al, 2020 ), but the private information of individuals is accurate and specific in reality. Therefore, adopting the perspective of user psychological load, this study examined the impact of the normativeness and intelligibility of privacy interpretation information on the willingness to accept targeted advertising, which not only conforms to the individual’s intrinsic cognitive pattern but also provides new ideas for research on privacy interpretation and targeted advertising.…”

Section: Discussionmentioning

confidence: 99%

“…By providing additional detail on how enterprises or platforms collect, use, and locate users, consumers’ understanding and trust in privacy interpretation information can be increased (Wei et al, 2020 ). In addition, scholars have tested the compliance of Internet companies’ privacy interpretation content and optimized the privacy interpretation system, thus enhancing consumers’ trust in the platform (Hashmi et al, 2021 ; Luo et al, 2021 ). However, the literature tends to explain privacy-related matters in a vague, abstract manner, whereas in real-life situations, the collection, analysis, and use of user privacy information by companies is precise and specific.…”

Section: Review Of Relevant Researchmentioning

confidence: 99%

Impact of the normativeness and intelligibility of privacy interpretation information on the willingness to accept targeted advertising —A cognitive load perspective

2023

View full text Add to dashboard Cite

From the perspective of the user’s psychological load, this study examined the cognitive mechanism by which privacy interpretation information affects the willingness to accept targeted advertising. Our findings provide a reference for enterprises seeking to develop and improve privacy interpretation information and reduce advertising avoidance behaviour. Based on information processing theory and cognitive load theory, this study experimentally collected volunteers’ electroencephalography (EEG) data, interpreted the EEG results as representing emotions and cognitive load, and analysed the impact of the normativeness and intelligibility of privacy interpretation information on the willingness to accept targeted advertising. Intelligibility significantly affected this willingness. In the case of acceptable transparency, users were more inclined to avoid targeted advertising under low interpretability. Low interpretability caused them to expend more cognitive effort, which induced a larger N2 amplitude. In the case of unacceptable transparency, the opposite conclusion was drawn. In addition, privacy information with high interpretability was more likely to arouse users’ emotions and induce a greater amplitude of late positive potential. Supplementary Information The online version contains supplementary material available at 10.1007/s12144-023-04325-6.

show abstract

“…Despite the assurances for privacy, security, and anonymity given by the websites and privacy policies, users are victims of personally identifiable information (PII) leakages [19]. Similarly, by using chatbot services, users may inadvertently be exposed to the privacy and security risks [31].…”

Section: Introductionmentioning

confidence: 99%

An Empirical Assessment of Security and Privacy Risks of Web based-Chatbots

Waheed¹,

Ikram²,

Hashmi³

et al. 2022

Preprint

Self Cite

View full text Add to dashboard Cite

Web-based chatbots provide website owners with the benefits of increased sales, immediate response to their customers, and insight into customer behaviour. While Web-based chatbots are getting popular, they have not received much scrutiny from security researchers. The benefits to owners come at the cost of users' privacy and security. Vulnerabilities, such as tracking cookies and third-party domains, can be hidden in the chatbot's iFrame script. This paper presents a large-scale analysis of five Web-based chatbots among the top 1-million Alexa websites. Through our crawler tool, we identify the presence of chatbots in these 1-million websites. We discover that 13,515 out of the top 1million Alexa websites (1.59%) use one of the five analysed chatbots. Our analysis reveals that the top 300k Alexa ranking websites are dominated by Intercom chatbots that embed the least number of third-party domains. LiveChat chatbots dominate the remaining websites and embed the highest samples of third-party domains. We also find that 850 (6.29%) of the chatbots use insecure protocols to transfer users' chats in plain text. Furthermore, some chatbots heavily rely on cookies for tracking and advertisement purposes. More than two-thirds (68.92%) of the identified cookies in chatbot iFrames are used for ads and tracking users. Our results show that, despite the promises for privacy, security, and anonymity given by the majority of the websites, millions of users may unknowingly be subject to poor security guarantees by chatbot service providers.

show abstract

Longitudinal Compliance Analysis of Android Applications with Privacy Policies

Cited by 5 publications

References 19 publications

Understanding Chinese Internet Users' Perceptions of, and Online Platforms' Compliance with, the Personal Information Protection Law (PIPL)

Understanding Chinese Internet Users' Perceptions of, and Online Platforms' Compliance with, the Personal Information Protection Law (PIPL)

Impact of the normativeness and intelligibility of privacy interpretation information on the willingness to accept targeted advertising —A cognitive load perspective

An Empirical Assessment of Security and Privacy Risks of Web based-Chatbots

Contact Info

Product

Resources

About